Edit tour

Windows Analysis Report
y8uLBHoe4J.exe

Overview

General Information

Sample Name:	y8uLBHoe4J.exe
Analysis ID:	563182
MD5:	d7699afcf044b90a9f22bd4ed2662c88
SHA1:	afe7ad4e2f7b518695635d2b8766ffc2d8ef0df2
SHA256:	d6fa908610cbcfd0de2bfbfadc4ae6f50194e9bccec7ec8a63f7aa4546b72715
Tags:	BitRATexeRAT
Infos:

Detection

BitRAT

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Yara detected BitRAT

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Antivirus / Scanner detection for submitted sample

System process connects to network (likely due to code injection or exploit)

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

Hides threads from debuggers

Sigma detected: System File Execution Location Anomaly

Sigma detected: File Created with System Process Name

Found API chain indicative of debugger detection

Machine Learning detection for sample

May check the online IP address of the machine

C2 URLs / IPs found in malware configuration

May use the Tor software to hide its network traffic

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Yara signature match

Antivirus or Machine Learning detection for unpacked file

Contains functionality to check if a debugger is running (IsDebuggerPresent)

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Found evasive API chain (date check)

PE file contains sections with non-standard names

Sleep loop found (likely to delay execution)

Detected potential crypto function

Contains functionality to query CPU information (cpuid)

Sample execution stops while process was sleeping (likely an evasion)

Contains functionality to dynamically determine API calls

PE file contains executable resources (Code or Archives)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Sample file is different than original file name gathered from version info

Drops PE files

Contains functionality to read the PEB

Detected TCP or UDP traffic on non-standard ports

Installs a global mouse hook

Connects to several IPs in different countries

Found large amount of non-executed APIs

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

y8uLBHoe4J.exe (PID: 7076 cmdline: "C:\Users\user\Desktop\y8uLBHoe4J.exe" MD5: D7699AFCF044B90A9F22BD4ED2662C88)

dllhost.exe (PID: 5608 cmdline: "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc MD5: 5CFE61FF895C7DAA889708665EF05D7B)

dllhost.exe (PID: 5864 cmdline: "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc MD5: 5CFE61FF895C7DAA889708665EF05D7B)

dllhost.exe (PID: 6496 cmdline: "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc MD5: 5CFE61FF895C7DAA889708665EF05D7B)

dllhost.exe (PID: 5188 cmdline: "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc MD5: 5CFE61FF895C7DAA889708665EF05D7B)

dllhost.exe (PID: 6668 cmdline: "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc MD5: 5CFE61FF895C7DAA889708665EF05D7B)

dllhost.exe (PID: 5372 cmdline: "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc MD5: 5CFE61FF895C7DAA889708665EF05D7B)

dllhost.exe (PID: 5300 cmdline: "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc MD5: 5CFE61FF895C7DAA889708665EF05D7B)

cleanup

Malware Configuration

Threatname: BitRat

{"Host": "tcki6mrrcnrt33qy52viv7m64y6hepkv646nnzglrkbgytyt6b2hdrid.onion", "Port": "0", "Tor Port": "80", "Install Dir": "0", "Install File": "0", "Communication Password": "81dc9bdb52d04dc20036dbd8313ed055", "Tor Process Name": "dllhost"}

Yara Overview

Initial Sample

Source	Rule	Description	Author	Strings
y8uLBHoe4J.exe	JoeSecurity_BitRAT	Yara detected BitRAT	Joe Security
y8uLBHoe4J.exe	MALWARE_Win_BitRAT	Detects BitRAT RAT	ditekSHen	0x339ffc:$s1: \plg\ 0x33a170:$s3: files_delete 0x338f8c:$s9: ddos_stop 0x339fdc:$s10: socks5_srv_start 0x33a1bc:$s16: klg\| 0x338fbc:$s17: Slowloris 0x33a064:$s18: Bot ID: 0x33a5a4:$t1: <sz>N/A</sz>

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: y8uLBHoe4J.exe PID: 7076	JoeSecurity_BitRAT	Yara detected BitRAT	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.y8uLBHoe4J.exe.400000.0.unpack	JoeSecurity_BitRAT	Yara detected BitRAT	Joe Security
0.2.y8uLBHoe4J.exe.400000.0.unpack	MALWARE_Win_BitRAT	Detects BitRAT RAT	ditekSHen	0x339ffc:$s1: \plg\ 0x33a170:$s3: files_delete 0x338f8c:$s9: ddos_stop 0x339fdc:$s10: socks5_srv_start 0x33a1bc:$s16: klg\| 0x338fbc:$s17: Slowloris 0x33a064:$s18: Bot ID: 0x33a5a4:$t1: <sz>N/A</sz>
0.0.y8uLBHoe4J.exe.400000.0.unpack	JoeSecurity_BitRAT	Yara detected BitRAT	Joe Security
0.0.y8uLBHoe4J.exe.400000.0.unpack	MALWARE_Win_BitRAT	Detects BitRAT RAT	ditekSHen	0x339ffc:$s1: \plg\ 0x33a170:$s3: files_delete 0x338f8c:$s9: ddos_stop 0x339fdc:$s10: socks5_srv_start 0x33a1bc:$s16: klg\| 0x338fbc:$s17: Slowloris 0x33a064:$s18: Bot ID: 0x33a5a4:$t1: <sz>N/A</sz>

Sigma Overview

System Summary

Sigma detected: System File Execution Location Anomaly

Source: Process started

Author: Florian Roth, Patrick Bareiss, Anton Kutepov, oscd.community: Data: Command: "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc, CommandLine: "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc, CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe, NewProcessName: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe, OriginalFileName: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe, ParentCommandLine: "C:\Users\user\Desktop\y8uLBHoe4J.exe" , ParentImage: C:\Users\user\Desktop\y8uLBHoe4J.exe, ParentProcessId: 7076, ProcessCommandLine: "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc, ProcessId: 5608

Sigma detected: File Created with System Process Name

Source: File created

Author: Sander Wiebing: Data: EventID: 11, Image: C:\Users\user\Desktop\y8uLBHoe4J.exe, ProcessId: 7076, TargetFilename: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 0.2.y8uLBHoe4J.exe.400000.0.unpack

Malware Configuration Extractor: BitRat {"Host": "tcki6mrrcnrt33qy52viv7m64y6hepkv646nnzglrkbgytyt6b2hdrid.onion", "Port": "0", "Tor Port": "80", "Install Dir": "0", "Install File": "0", "Communication Password": "81dc9bdb52d04dc20036dbd8313ed055", "Tor Process Name": "dllhost"}

Multi AV Scanner detection for submitted file

Source: y8uLBHoe4J.exe	Virustotal: Detection: 68%			Perma Link
Source: y8uLBHoe4J.exe	ReversingLabs: Detection: 74%

Antivirus / Scanner detection for submitted sample

Source: y8uLBHoe4J.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe

Avira: detection malicious, Label: TR/Redcap.cskpb

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Metadefender: Detection: 32%			Perma Link
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	ReversingLabs: Detection: 62%

Machine Learning detection for sample

Source: y8uLBHoe4J.exe

Joe Sandbox ML: detected

Source: 0.2.y8uLBHoe4J.exe.400000.0.unpack	Avira: Label: TR/Redcap.cskpb
Source: 0.0.y8uLBHoe4J.exe.400000.0.unpack	Avira: Label: TR/Redcap.cskpb
Source: 0.3.y8uLBHoe4J.exe.2b9f180.3.unpack	Avira: Label: TR/Patched.Ren.Gen

Source: y8uLBHoe4J.exe, 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

Source: y8uLBHoe4J.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE

Source: unknown

HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.3:49796 version: TLS 1.2

Networking

System process connects to network (likely due to code injection or exploit)

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 185.225.68.133 443	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 66.111.2.16 9001	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 149.56.141.138 9001	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 95.216.19.206 443	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 89.163.146.190 9001	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 85.230.178.139 443	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 62.133.35.244 9001	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 88.214.35.62 443	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 154.35.175.225 443	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 31.121.161.188 888	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 37.252.187.111 443	Jump to behavior

May check the online IP address of the machine

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

DNS query: name: myexternalip.com

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: tcki6mrrcnrt33qy52viv7m64y6hepkv646nnzglrkbgytyt6b2hdrid.onion

Source: global traffic	TCP traffic: 192.168.2.3:49747 -> 149.56.141.138:9001
Source: global traffic	TCP traffic: 192.168.2.3:49750 -> 66.111.2.16:9001
Source: global traffic	TCP traffic: 192.168.2.3:49754 -> 89.163.146.190:9001
Source: global traffic	TCP traffic: 192.168.2.3:49809 -> 31.121.161.188:888
Source: global traffic	TCP traffic: 192.168.2.3:49810 -> 62.133.35.244:9001

Source: unknown

Network traffic detected: IP country count 10

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 37.252.187.111
Source: unknown	TCP traffic detected without corresponding DNS query: 37.252.187.111
Source: unknown	TCP traffic detected without corresponding DNS query: 37.252.187.111
Source: unknown	TCP traffic detected without corresponding DNS query: 37.252.187.111
Source: unknown	TCP traffic detected without corresponding DNS query: 37.252.187.111
Source: unknown	TCP traffic detected without corresponding DNS query: 37.252.187.111
Source: unknown	TCP traffic detected without corresponding DNS query: 37.252.187.111
Source: unknown	TCP traffic detected without corresponding DNS query: 85.230.178.139
Source: unknown	TCP traffic detected without corresponding DNS query: 85.230.178.139
Source: unknown	TCP traffic detected without corresponding DNS query: 85.230.178.139
Source: unknown	TCP traffic detected without corresponding DNS query: 149.56.141.138
Source: unknown	TCP traffic detected without corresponding DNS query: 149.56.141.138
Source: unknown	TCP traffic detected without corresponding DNS query: 149.56.141.138
Source: unknown	TCP traffic detected without corresponding DNS query: 154.35.175.225
Source: unknown	TCP traffic detected without corresponding DNS query: 154.35.175.225
Source: unknown	TCP traffic detected without corresponding DNS query: 154.35.175.225
Source: unknown	TCP traffic detected without corresponding DNS query: 154.35.175.225
Source: unknown	TCP traffic detected without corresponding DNS query: 154.35.175.225
Source: unknown	TCP traffic detected without corresponding DNS query: 154.35.175.225
Source: unknown	TCP traffic detected without corresponding DNS query: 154.35.175.225
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16
Source: unknown	TCP traffic detected without corresponding DNS query: 66.111.2.16

Source: dllhost.exe

String found in binary or memory: www.google.com,www.mit.edu,www.yahoo.com,www.slashdot.org equals www.yahoo.com (Yahoo)

Source: y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://api.ipify.org
Source: y8uLBHoe4J.exe, 00000000.00000002.578610662.0000000002B95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://bot.whatismyipaddress.com
Source: y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://checkip.amazonaws.com
Source: y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://checkip.amazonaws.com%Y
Source: y8uLBHoe4J.exe, 00000000.00000003.529939992.000000000445E000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.443808857.000000000445E000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: dllhost.exe	String found in binary or memory: http://freehaven.net/anonbib/#hs-attack06
Source: y8uLBHoe4J.exe, 00000000.00000002.578503247.0000000002B70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ip.anysrc.net/plain/clientip
Source: y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ipecho.net/plain
Source: y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ipinfo.io/ip
Source: y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ipv4.icanhazip.com
Source: y8uLBHoe4J.exe, 00000000.00000003.317622348.0000000002BA0000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000000.301751028.00000000007A9000.00000002.00000001.01000000.00000003.sdmp, y8uLBHoe4J.exe, 00000000.00000003.317747468.0000000002B71000.00000004.00000800.00020000.00000000.sdmp, dllhost.exe, 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmp, dllhost.exe, 00000012.00000002.541234634.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://mingw-w64.sourceforge.net/X
Source: y8uLBHoe4J.exe, 00000000.00000002.578610662.0000000002B95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tools.feron.it/php/ip.php
Source: y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://wtfismyip.com/text
Source: y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://wtfismyip.com/text3
Source: y8uLBHoe4J.exe, 00000000.00000000.301751028.00000000007A9000.00000002.00000001.01000000.00000003.sdmp, y8uLBHoe4J.exe, 00000000.00000003.318995723.0000000002B71000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.319081149.0000000000EC5000.00000004.00000020.00020000.00000000.sdmp, dllhost.exe, 00000002.00000002.434629760.000000006FF53000.00000004.00000001.01000000.0000000B.sdmp	String found in binary or memory: http://www.zlib.net/D
Source: dllhost.exe	String found in binary or memory: https://blog.torproject.org/blog/lifecycle-of-a-new-relay
Source: dllhost.exe, 00000002.00000002.424141367.0000000000261000.00000040.00000001.01000000.00000004.sdmp	String found in binary or memory: https://blog.torproject.org/blog/lifecycle-of-a-new-relayCan
Source: y8uLBHoe4J.exe, 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmp, y8uLBHoe4J.exe, 00000000.00000000.301658040.00000000006E0000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://curl.haxx.se/docs/http-cookies.html
Source: y8uLBHoe4J.exe, 00000000.00000002.578610662.0000000002B95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myexternalip.com/F
Source: y8uLBHoe4J.exe, 00000000.00000002.578610662.0000000002B95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myexternalip.com/N
Source: y8uLBHoe4J.exe, 00000000.00000002.578610662.0000000002B95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myexternalip.com/raw
Source: y8uLBHoe4J.exe, 00000000.00000002.579464660.00000000043A6000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.530219958.00000000043A6000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://myexternalip.com/raw.
Source: y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myexternalip.com/rawQY6
Source: y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myexternalip.com/rawiYN
Source: y8uLBHoe4J.exe, 00000000.00000002.579464660.00000000043A6000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.530219958.00000000043A6000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://myexternalip.com/rawo
Source: dllhost.exe	String found in binary or memory: https://trac.torproject.org/8742
Source: dllhost.exe	String found in binary or memory: https://trac.torproject.org/proj
Source: dllhost.exe, 00000002.00000002.424141367.0000000000261000.00000040.00000001.01000000.00000004.sdmp	String found in binary or memory: https://trac.torproject.org/projects/tor/ticket/14917.
Source: dllhost.exe	String found in binary or memory: https://trac.torproject.org/projects/tor/ticket/21155.
Source: dllhost.exe	String found in binary or memory: https://wiki.torprojec
Source: dllhost.exe, 00000002.00000002.424141367.0000000000261000.00000040.00000001.01000000.00000004.sdmp	String found in binary or memory: https://wiki.torproject.org/TheOnionRouter/TorFAQ#SOCKSAndDNS.%s
Source: dllhost.exe, 00000002.00000002.424141367.0000000000261000.00000040.00000001.01000000.00000004.sdmp	String found in binary or memory: https://wiki.torproject.org/TheOnionRouter/TorFAQ#SOCKSAndDNS.%sDANGEROUS_SOCKS
Source: y8uLBHoe4J.exe, 00000000.00000003.548450032.000000000446D000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.529997360.0000000002BB6000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.444245058.0000000002BB6000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.529868552.00000000043D4000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.314349132.0000000002BDE000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.443724243.00000000043DF000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.443808857.000000000445E000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.550960808.00000000043D4000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000000.301751028.00000000007A9000.00000002.00000001.01000000.00000003.sdmp, y8uLBHoe4J.exe, 00000000.00000003.423939443.0000000004391000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549022840.00000000043D4000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.551170062.000000000446D000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.446459477.000000000446D000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.424142443.0000000002BB6000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.445981092.00000000044DB000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.314524145.0000000002B71000.00000004.00000800.00020000.00000000.sdmp, dllhost.exe, 00000002.00000002.431494202.000000006E599000.00000004.00000001.01000000.00000007.sdmp, dllhost.exe, 00000002.00000002.434497083.000000006E91E000.00000004.00000001.01000000.00000005.sdmp	String found in binary or memory: https://www.openssl.org/H
Source: dllhost.exe	String found in binary or memory: https://www.torproject.o
Source: dllhost.exe	String found in binary or memory: https://www.torproject.org/
Source: dllhost.exe	String found in binary or memory: https://www.torproject.org/docs/faq.html#BestOSForRelay
Source: dllhost.exe	String found in binary or memory: https://www.torproject.org/documentation.html
Source: dllhost.exe	String found in binary or memory: https://www.torproject.org/download/download#warning
Source: dllhost.exe, 00000002.00000002.424141367.0000000000261000.00000040.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.torproject.org/download/download#warningalphabetaThis

Source: unknown

DNS traffic detected: queries for: myexternalip.com

Source: unknown

HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.3:49796 version: TLS 1.2

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

Windows user hook set: 0 mouse low level NULL

Jump to behavior

System Summary

Malicious sample detected (through community Yara rule)

Source: y8uLBHoe4J.exe, type: SAMPLE	Matched rule: Detects BitRAT RAT Author: ditekSHen
Source: 0.2.y8uLBHoe4J.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects BitRAT RAT Author: ditekSHen
Source: 0.0.y8uLBHoe4J.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects BitRAT RAT Author: ditekSHen

Source: y8uLBHoe4J.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE

Source: y8uLBHoe4J.exe, type: SAMPLE	Matched rule: MALWARE_Win_BitRAT author = ditekSHen, description = Detects BitRAT RAT, clamav_sig = MALWARE.Win.Trojan.BitRAT
Source: 0.2.y8uLBHoe4J.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_BitRAT author = ditekSHen, description = Detects BitRAT RAT, clamav_sig = MALWARE.Win.Trojan.BitRAT
Source: 0.0.y8uLBHoe4J.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_BitRAT author = ditekSHen, description = Detects BitRAT RAT, clamav_sig = MALWARE.Win.Trojan.BitRAT

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 2_2_6E2E8C00	2_2_6E2E8C00
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E380650	11_2_6E380650
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E37B64C	11_2_6E37B64C
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E3796A0	11_2_6E3796A0
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E377691	11_2_6E377691
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E37FA90	11_2_6E37FA90
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E37F280	11_2_6E37F280
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E3772C0	11_2_6E3772C0
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E379B06	11_2_6E379B06
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E376B60	11_2_6E376B60
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E37C740	11_2_6E37C740
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E377F49	11_2_6E377F49
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E37CBB3	11_2_6E37CBB3
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E37FFA0	11_2_6E37FFA0
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E376FC0	11_2_6E376FC0
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E37B420	11_2_6E37B420
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E380C10	11_2_6E380C10
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E376870	11_2_6E376870
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E381CB0	11_2_6E381CB0
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E37D4A1	11_2_6E37D4A1
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E37C8E7	11_2_6E37C8E7
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E37FCE0	11_2_6E37FCE0
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E37F4E0	11_2_6E37F4E0
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E380150	11_2_6E380150
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E3845C1	11_2_6E3845C1
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 13_2_6DB28C00	13_2_6DB28C00

Source: y8uLBHoe4J.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
Source: y8uLBHoe4J.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed
Source: y8uLBHoe4J.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
Source: y8uLBHoe4J.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
Source: y8uLBHoe4J.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
Source: y8uLBHoe4J.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
Source: y8uLBHoe4J.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
Source: y8uLBHoe4J.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Source: y8uLBHoe4J.exe, 00000000.00000003.548450032.000000000446D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.529997360.0000000002BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.444245058.0000000002BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.529868552.00000000043D4000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.314349132.0000000002BDE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.443724243.00000000043DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.317622348.0000000002BA0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWinPthreadGCp( vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.443808857.000000000445E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.550960808.00000000043D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000000.301751028.00000000007A9000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamelibcryptoH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000000.301751028.00000000007A9000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000000.301751028.00000000007A9000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameWinPthreadGCp( vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000000.301751028.00000000007A9000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamezlib1.dll* vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.423939443.0000000004391000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000002.578673056.0000000002BBC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameD3D10Warp.dllj% vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.549022840.00000000043D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.551170062.000000000446D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.446459477.000000000446D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.424142443.0000000002BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.318995723.0000000002B71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamezlib1.dll* vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.317747468.0000000002B71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWinPthreadGCp( vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.445981092.00000000044DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.314524145.0000000002B71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs y8uLBHoe4J.exe
Source: y8uLBHoe4J.exe, 00000000.00000003.319081149.0000000000EC5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamezlib1.dll* vs y8uLBHoe4J.exe

Source: y8uLBHoe4J.exe	Virustotal: Detection: 68%
Source: y8uLBHoe4J.exe	ReversingLabs: Detection: 74%

Source: y8uLBHoe4J.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\y8uLBHoe4J.exe "C:\Users\user\Desktop\y8uLBHoe4J.exe"
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E436EBB3-524F-11CE-9F53-0020AF0BA770}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

File created: C:\Users\user\AppData\Local\a31a93ae\

Jump to behavior

Source: classification engine

Classification label: mal100.troj.evad.winEXE@15/21@1/13

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

Mutant created: \Sessions\1\BaseNamedObjects\cb792e782a815e08b878f01e1940937f

Source: dllhost.exe	String found in binary or memory: ./src/lib/net/address.h
Source: dllhost.exe	String found in binary or memory: Malformed X-Your-Address-Is header %s. Ignoring.
Source: dllhost.exe	String found in binary or memory: Got X-Your-Address-Is: %s.
Source: dllhost.exe	String found in binary or memory: My or-address line is <%s>
Source: dllhost.exe	String found in binary or memory: or-address %s:%d
Source: dllhost.exe	String found in binary or memory: Can't start/stop being a server while Sandbox is active
Source: dllhost.exe	String found in binary or memory: Can't start/stop being a server while Sandbox is active
Source: dllhost.exe	String found in binary or memory: src/feature/client/addressmap.c
Source: dllhost.exe	String found in binary or memory: X-Your-Address-Is:
Source: dllhost.exe	String found in binary or memory: Configuration line does not consist of "onion-address authorization-cookie [service-name]": '%s'
Source: dllhost.exe	String found in binary or memory: introduction-point %s ip-address %s onion-port %d onion-key %sservice-key %s
Source: dllhost.exe	String found in binary or memory: src/feature/keymgt/loadkey.c
Source: dllhost.exe	String found in binary or memory: ip-address
Source: dllhost.exe	String found in binary or memory: dir-address
Source: dllhost.exe	String found in binary or memory: X-Your-Address-Is: %s
Source: dllhost.exe	String found in binary or memory: 333333?./src/lib/net/address.h
Source: dllhost.exe	String found in binary or memory: or-address
Source: dllhost.exe	String found in binary or memory: signed_body+(end-start_of_annotations) == router->cache_info.signed_descriptor_body+len
Source: dllhost.exe	String found in binary or memory: Couldn't parse dir-address in certificate
Source: dllhost.exe	String found in binary or memory: accounting/interval-start
Source: dllhost.exe	String found in binary or memory: --install
Source: dllhost.exe	String found in binary or memory: -install
Source: dllhost.exe	String found in binary or memory: Bad .in-addr.arpa address "%s"; sending error.
Source: dllhost.exe	String found in binary or memory: Attempt to connect to a .in-addr.arpa address "%s"; sending error.
Source: dllhost.exe	String found in binary or memory: --help
Source: dllhost.exe	String found in binary or memory: --help
Source: dllhost.exe	String found in binary or memory: Somehow a malformed in-addr.arpa address reached here.
Source: dllhost.exe	String found in binary or memory: ./src/lib/net/address.h
Source: dllhost.exe	String found in binary or memory: Malformed X-Your-Address-Is header %s. Ignoring.
Source: dllhost.exe	String found in binary or memory: Got X-Your-Address-Is: %s.
Source: dllhost.exe	String found in binary or memory: My or-address line is <%s>
Source: dllhost.exe	String found in binary or memory: or-address %s:%d
Source: dllhost.exe	String found in binary or memory: Can't start/stop being a server while Sandbox is active
Source: dllhost.exe	String found in binary or memory: Can't start/stop being a server while Sandbox is active
Source: dllhost.exe	String found in binary or memory: src/feature/client/addressmap.c
Source: dllhost.exe	String found in binary or memory: X-Your-Address-Is:
Source: dllhost.exe	String found in binary or memory: Configuration line does not consist of "onion-address authorization-cookie [service-name]": '%s'
Source: dllhost.exe	String found in binary or memory: introduction-point %s ip-address %s onion-port %d onion-key %sservice-key %s
Source: dllhost.exe	String found in binary or memory: src/feature/keymgt/loadkey.c
Source: dllhost.exe	String found in binary or memory: ip-address
Source: dllhost.exe	String found in binary or memory: dir-address
Source: dllhost.exe	String found in binary or memory: X-Your-Address-Is: %s
Source: dllhost.exe	String found in binary or memory: 333333?./src/lib/net/address.h
Source: dllhost.exe	String found in binary or memory: or-address
Source: dllhost.exe	String found in binary or memory: signed_body+(end-start_of_annotations) == router->cache_info.signed_descriptor_body+len
Source: dllhost.exe	String found in binary or memory: Couldn't parse dir-address in certificate
Source: dllhost.exe	String found in binary or memory: accounting/interval-start
Source: dllhost.exe	String found in binary or memory: --install
Source: dllhost.exe	String found in binary or memory: -install
Source: dllhost.exe	String found in binary or memory: Bad .in-addr.arpa address "%s"; sending error.
Source: dllhost.exe	String found in binary or memory: Attempt to connect to a .in-addr.arpa address "%s"; sending error.
Source: dllhost.exe	String found in binary or memory: --help
Source: dllhost.exe	String found in binary or memory: --help
Source: dllhost.exe	String found in binary or memory: Somehow a malformed in-addr.arpa address reached here.
Source: dllhost.exe	String found in binary or memory: ../../gcc-9.2.0/libgcc/soft-fp/addtf3.c
Source: dllhost.exe	String found in binary or memory: ./src/lib/net/address.h
Source: dllhost.exe	String found in binary or memory: Malformed X-Your-Address-Is header %s. Ignoring.
Source: dllhost.exe	String found in binary or memory: Got X-Your-Address-Is: %s.
Source: dllhost.exe	String found in binary or memory: My or-address line is <%s>
Source: dllhost.exe	String found in binary or memory: or-address %s:%d
Source: dllhost.exe	String found in binary or memory: Can't start/stop being a server while Sandbox is active
Source: dllhost.exe	String found in binary or memory: Can't start/stop being a server while Sandbox is active
Source: dllhost.exe	String found in binary or memory: src/feature/client/addressmap.c
Source: dllhost.exe	String found in binary or memory: X-Your-Address-Is:
Source: dllhost.exe	String found in binary or memory: Configuration line does not consist of "onion-address authorization-cookie [service-name]": '%s'
Source: dllhost.exe	String found in binary or memory: introduction-point %s ip-address %s onion-port %d onion-key %sservice-key %s
Source: dllhost.exe	String found in binary or memory: src/feature/keymgt/loadkey.c
Source: dllhost.exe	String found in binary or memory: ip-address
Source: dllhost.exe	String found in binary or memory: dir-address
Source: dllhost.exe	String found in binary or memory: X-Your-Address-Is: %s
Source: dllhost.exe	String found in binary or memory: 333333?./src/lib/net/address.h
Source: dllhost.exe	String found in binary or memory: or-address
Source: dllhost.exe	String found in binary or memory: signed_body+(end-start_of_annotations) == router->cache_info.signed_descriptor_body+len
Source: dllhost.exe	String found in binary or memory: Couldn't parse dir-address in certificate
Source: dllhost.exe	String found in binary or memory: accounting/interval-start
Source: dllhost.exe	String found in binary or memory: --install
Source: dllhost.exe	String found in binary or memory: -install
Source: dllhost.exe	String found in binary or memory: Bad .in-addr.arpa address "%s"; sending error.
Source: dllhost.exe	String found in binary or memory: Attempt to connect to a .in-addr.arpa address "%s"; sending error.
Source: dllhost.exe	String found in binary or memory: --help
Source: dllhost.exe	String found in binary or memory: --help
Source: dllhost.exe	String found in binary or memory: Somehow a malformed in-addr.arpa address reached here.

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior

Source: y8uLBHoe4J.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: y8uLBHoe4J.exe

Static file information: File size 8177152 > 1048576

Source: y8uLBHoe4J.exe	Static PE information: Raw size of .text is bigger than: 0x100000 < 0x2de200
Source: y8uLBHoe4J.exe	Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x409e00

Source: y8uLBHoe4J.exe

Static PE information: More than 200 imports for KERNEL32.dll

Source: y8uLBHoe4J.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: y8uLBHoe4J.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: y8uLBHoe4J.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: y8uLBHoe4J.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: y8uLBHoe4J.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Code function: 0_2_0068A736 push ecx; ret	0_2_0068A749
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 2_2_6E2E8A5A push dword ptr [eax+04h]; ret	2_2_6E2E8A89
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 2_2_6E2E5AD0 push eax; mov dword ptr [esp], esi	2_2_6E2E5B48
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E371440 push dword ptr [eax+04h]; ret	11_2_6E37146F
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 13_2_6DB25AD0 push eax; mov dword ptr [esp], esi	13_2_6DB25B48
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 13_2_6DB28A5A push dword ptr [eax+04h]; ret	13_2_6DB28A89

Source: dllhost.exe.0.dr	Static PE information: section name: UPX2
Source: libevent-2-1-6.dll.0.dr	Static PE information: section name: UPX2
Source: libgcc_s_sjlj-1.dll.0.dr	Static PE information: section name: UPX2
Source: libssp-0.dll.0.dr	Static PE information: section name: UPX2

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe

Code function: 11_2_6E478CA0 EntryPoint,LoadLibraryA,GetProcAddress,VirtualProtect,VirtualProtect,

11_2_6E478CA0

Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	File created: C:\Users\user\AppData\Local\a31a93ae\tor\libgcc_s_sjlj-1.dll	Jump to dropped file
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	File created: C:\Users\user\AppData\Local\a31a93ae\tor\libevent-2-1-6.dll	Jump to dropped file
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	File created: C:\Users\user\AppData\Local\a31a93ae\tor\libcrypto-1_1.dll	Jump to dropped file
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	File created: C:\Users\user\AppData\Local\a31a93ae\tor\libssp-0.dll	Jump to dropped file
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	File created: C:\Users\user\AppData\Local\a31a93ae\tor\zlib1.dll	Jump to dropped file
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	File created: C:\Users\user\AppData\Local\a31a93ae\tor\libssl-1_1.dll	Jump to dropped file
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	File created: C:\Users\user\AppData\Local\a31a93ae\tor\libwinpthread-1.dll	Jump to dropped file
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	File created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

May use the Tor software to hide its network traffic

Source: dllhost.exe

Binary or memory string: onion-port

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe TID: 6472	Thread sleep count: 3909 > 30	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe TID: 6472	Thread sleep time: -39090s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe TID: 6528	Thread sleep time: -250000s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe

Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes

graph_2-4811

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

Thread sleep count: Count: 3909 delay: -10

Jump to behavior

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Last function: Thread delayed
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

Window / User API: threadDelayed 3909

Jump to behavior

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	API coverage: 0.1 %
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	API coverage: 0.4 %
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	API coverage: 0.1 %

Source: dllhost.exe, 00000015.00000002.581235217.0000000005060000.00000002.00000001.00040000.0000000F.sdmp	Binary or memory string: MIGJAoGBAOr0QZn0MJFa84XQW5B5l1VOJYj8Ou4p9VmCIoE+xwzV0FStI8QOPnpl
Source: dllhost.exe, 00000002.00000002.426503258.000000000390E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ^dbrVU54VB/MUYwBRFqA7t0jcwYp4c+2AgioanEu1c-M7zg8ZN8ldVEE1Brn3TbrgU5zoLZxB5xx5/GOeB3Vo4-M76E2E4ev/piEABamQvaJHB4gJAJ7XmO18S0ugOrgbQ-M8Sjn+0OvrlqCpxSB/5eX/4vYCcZff/KApEBh7nilwk-M8k/pj5N/hL2RE3R8/1T3JjGFiVOLrmAF6kd7LnRhzc-M+v+sE4h5LaB3Lk2PYcM9qJMe+CwsN6Fp9BVfPrS+/8-M/P+lebm2vJWD69sm4cCe6QA8nIn7JKjwRYvk0HyfFI-M/VigXUFeCFVOiCgGu6Rxg4wqEa7j8XRlnbDSDf+CqE-M/x9vXv3cfgPUA0FVZkY3PEq3EimoH/DlFpQTXUpTe8-NAkWL2RNuJw+rpUweGlYrObmB7rqxuNu2VSuZg70RPQ-NAwnhh6JrlHkAFmaC2+vs7edc0ll0KFLykaSe7yvW7c-NBDGyehtmcrCElguWBzKMfDcJAiSCQP1PQaNPYrvB8o-NBwuHSUsyWkS+KqaCR0MPUqMoZZ7O5oDQMyvCoTanlA-NB541NRziuTm1lJz4JxH9ekyzn20ZUQ2lstQ1TaSV8g-NB7Spw+teCEyDLo/sa6CZo03YCFx0ogM4C6n8WC4MXI-NCKjgrQpbrMEjJnb0v1oXfLI+hpQSOwqWOrl8ddAIW4-NCL3Si/UsBAtev2k/SMdSqtcoiiQv60fy46QjeENyCU-NCO7QEMUI11T0pJaWemNmxsbeP4DgJ5ejkhatu/O7pg-NCTBGa0S/PP0KDUwstXtEKleR73rKqy4+Z0n9sKkXn0-NCekQtHh1dTKnUWGtiCL0bIDeaIjgbaAorWH0LT3lyM-NDcPo0jge3NkbwEQ3A9qe9GvCFwPFQD/d3qXpLFjcm8-NDg27DxUyvxw7j9CKFzwkbWJgKgmb8oiF2Rg+IRNxpg-NF0f3jYEqF9y3I+VYWO1YNkJiMoT7Ux46HAMaKJJC40-NGWvx0btFL7ZxEpfm5mB8xVcuOZnlSL4NzjgMq4ZphI-NHSBMNjAxeLNnRurOvBxCNBCbbqrKiiJeZnhIB4rflg-NJ6wHJKyiKj3RJctELcA/mIljrxqQh9DxLaMZCI35b4-NKC4Vs9IXm5r1qbDetuvdhQ+0KUmCCDN2nxQ2D+BStQ-NKe8w86opbOho2id8k5DYSQiUorXyZoiO3wSg7wogRU-NKf6nTYX8OkSke4Z47WoYV8Rjy4eUFPXMpwgm8iS4d8-NLP80DdKiTuiJ29oTdIEFYTTz7pQWRFvzJJhh9hZ4aY-NL+xymnU8+vHRkMSC8PVUWcX7ePhjTtwbrFhGWxSPG0-NMEOlbeUaOK1iNGaE1uf8Qhtv8H9gtfACZ2gCgG3fHE-NMJZVasl7JY7da6MfNX3o3d0SZln0F8O8OV0GEIA0Lo-NMNOz23vzM7vHsVkfuLV1J5+Vi2vrEVUKwVhoWGMeJ0-NMQLb4ceeMNnBkuJQwvjSIj70jnSQtyDTjHzBDy8bk4-NNK0J7o3AWv63DiX/JX24f6T/OLaMJ+iPqmLaodbaoI-NODrzHpJEKcK+1CBsuvYd6MkGWTyuV+L04iihjKR5hU-NPNOArChC8ZWKCmM3viaMkNozlREH1PBBW6vw7/r5kM-NQJlSdFp32gBnFwyZ+M7yVE7CadAgenwk2OgjnRaKOo-NQRbu9tcczrMmWm4nQXnLF0tqbP66rlDRyyPCbW1PVg-NQsN8S4lzSXMwZRLPYKEDETSF3/qGSgH+9Nk6Artu8E-NQ6+5/EyVRKc72Ig5yijl3yxw+cj0x+r+lIK2m+X5Dk-NRvc2uUgBXXeTzq9kPVFMEvMlMoHkLt6DKZ/FgxZu+s-NSXF19/AU363VPjWb2joiD67TQiM0hgz2usTpWUVkU0-NSn7S9fIGyVMNeY1f2oqis3mRtqpnb6cXqd4Eo9lYEs-NSrPlVk/32JIZViDhHDDp5UMKdY5vXN+YX++8+/ZPvs-NTQpX7xf2jCqGA/qHpD9UPrjZHT3e61jzPbd+t6qybE-NT39f1se1ZcxFI27nQ3vyo9z8kB7obZsyLSs4zwYYXg-NUoF3u9ZVSgkswALP20LsGkonreU61vt9o6U0YhUVsU-NVLKTY+dJGPKYgwQKfEBs/f2iHlQdV9/xINf08r/3qc-NVOXfnc1ldXfJwtrALft0ef26EbcXLjOpM8ET36oRYM-NVexKGEiDioMQWT/mzTwRdn3RdCfchilRKM85252aq0-NWGZ3jNRJmRRqUeQ+CWaFsbI2V7Tgu1TiLDKvvkMCvs-NWKt9tic68s8wLTk1Ebj9fM5r3FJ8Gk2kvh4wWidwoY-NWxR2WBAzWXqulvJD4PaJ6CE0IhPPScrBr9CVqkmSlA-NXPwg5H2JbqqZxvapoG+FkiNGWQlBWMjEpQJKb/64TQ-NXyNq7D8zzQtTHUGGmAVSs8fK6dxttXa7xHNiuKNfIM-NX2bujw8uIu8zegaX9nbgCPWObMkV1xX+7zJaStGmpg-NYhO9iDnkSFbfVraWV+8p7UIQUwBe7u2hm9gblLPMk4-NYp4OxdJFsSYYDRGXqWB51q39o0NpcM89GCTrkOO6yo-NZZq/xzQyxO8WKh1JXaa+8yeZKaepo99Ulu/xCAtbCg-NaddJW5/OQUdeWJiqFCSc89nhuJZcF4NAhS9pbuUOxg-NbN+7FQHtPCLna1FuK8hcebSbrFeeykCwt7/RQrOOfE-NbVMHbDCevm6HdL7qQ2231UzQvov24lvIUAxT5WIowU-NbZBTuG5/9AfGTfIVbRlLEzAcXjTTubOF3plqIYSPvU-Nb24wc60ki+BbfZG7meJ7hNHTn/WPF0HdWmysj/tVtU-NdxskjTghhysvMgHIrvdgWw4A1TLt0MK/HMOVeekkNU-NeMQiMeSmGZXdxlA0kps658sw4XNVmgB2czM0DDb0rc-NedsithLg
Source: y8uLBHoe4J.exe, 00000000.00000003.444181750.00000000043C8000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579639375.00000000043C8000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.530253886.00000000043C8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: dllhost.exe, 00000015.00000002.581235217.0000000005060000.00000002.00000001.00040000.0000000F.sdmp	Binary or memory string: ntor-onion-key uD9yaAhGfsVMdt1WYzp7Tu0Yxaxs/mg53qI0xqZreQA
Source: dllhost.exe, 00000002.00000002.426503258.000000000390E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: brVU54VB/MUYwBRFqA7t0jcwYp4c+2AgioanEu1c-M7zg8ZN8ldVEE1Brn3TbrgU5zoLZxB5xx5/GOeB3Vo4-M76E2E4ev/piEABamQvaJHB4gJAJ7XmO18S0ugOrgbQ-M8Sjn+0OvrlqCpxSB/5eX/4vYCcZff/KApEBh7nilwk-M8k/pj5N/hL2RE3R8/1T3JjGFiVOLrmAF6kd7LnRhzc-M+v+sE4h5LaB3Lk2PYcM9qJMe+CwsN6Fp9BVfPrS+/8-M/P+lebm2vJWD69sm4cCe6QA8nIn7JKjwRYvk0HyfFI-M/VigXUFeCFVOiCgGu6Rxg4wqEa7j8XRlnbDSDf+CqE-M/x9vXv3cfgPUA0FVZkY3PEq3EimoH/DlFpQTXUpTe8-NAkWL2RNuJw+rpUweGlYrObmB7rqxuNu2VSuZg70RPQ-NAwnhh6JrlHkAFmaC2+vs7edc0ll0KFLykaSe7yvW7c-NBDGyehtmcrCElguWBzKMfDcJAiSCQP1PQaNPYrvB8o-NBwuHSUsyWkS+KqaCR0MPUqMoZZ7O5oDQMyvCoTanlA-NB541NRziuTm1lJz4JxH9ekyzn20ZUQ2lstQ1TaSV8g-NB7Spw+teCEyDLo/sa6CZo03YCFx0ogM4C6n8WC4MXI-NCKjgrQpbrMEjJnb0v1oXfLI+hpQSOwqWOrl8ddAIW4-NCL3Si/UsBAtev2k/SMdSqtcoiiQv60fy46QjeENyCU-NCO7QEMUI11T0pJaWemNmxsbeP4DgJ5ejkhatu/O7pg-NCTBGa0S/PP0KDUwstXtEKleR73rKqy4+Z0n9sKkXn0-NCekQtHh1dTKnUWGtiCL0bIDeaIjgbaAorWH0LT3lyM-NDcPo0jge3NkbwEQ3A9qe9GvCFwPFQD/d3qXpLFjcm8-NDg27DxUyvxw7j9CKFzwkbWJgKgmb8oiF2Rg+IRNxpg-NF0f3jYEqF9y3I+VYWO1YNkJiMoT7Ux46HAMaKJJC40-NGWvx0btFL7ZxEpfm5mB8xVcuOZnlSL4NzjgMq4ZphI-NHSBMNjAxeLNnRurOvBxCNBCbbqrKiiJeZnhIB4rflg-NJ6wHJKyiKj3RJctELcA/mIljrxqQh9DxLaMZCI35b4-NKC4Vs9IXm5r1qbDetuvdhQ+0KUmCCDN2nxQ2D+BStQ-NKe8w86opbOho2id8k5DYSQiUorXyZoiO3wSg7wogRU-NKf6nTYX8OkSke4Z47WoYV8Rjy4eUFPXMpwgm8iS4d8-NLP80DdKiTuiJ29oTdIEFYTTz7pQWRFvzJJhh9hZ4aY-NL+xymnU8+vHRkMSC8PVUWcX7ePhjTtwbrFhGWxSPG0-NMEOlbeUaOK1iNGaE1uf8Qhtv8H9gtfACZ2gCgG3fHE-NMJZVasl7JY7da6MfNX3o3d0SZln0F8O8OV0GEIA0Lo-NMNOz23vzM7vHsVkfuLV1J5+Vi2vrEVUKwVhoWGMeJ0-NMQLb4ceeMNnBkuJQwvjSIj70jnSQtyDTjHzBDy8bk4-NNK0J7o3AWv63DiX/JX24f6T/OLaMJ+iPqmLaodbaoI-NODrzHpJEKcK+1CBsuvYd6MkGWTyuV+L04iihjKR5hU-NPNOArChC8ZWKCmM3viaMkNozlREH1PBBW6vw7/r5kM-NQJlSdFp32gBnFwyZ+M7yVE7CadAgenwk2OgjnRaKOo-NQRbu9tcczrMmWm4nQXnLF0tqbP66rlDRyyPCbW1PVg-NQsN8S4lzSXMwZRLPYKEDETSF3/qGSgH+9Nk6Artu8E-NQ6+5/EyVRKc72Ig5yijl3yxw+cj0x+r+lIK2m+X5Dk-NRvc2uUgBXXeTzq9kPVFMEvMlMoHkLt6DKZ/FgxZu+s-NSXF19/AU363VPjWb2joiD67TQiM0hgz2usTpWUVkU0-NSn7S9fIGyVMNeY1f2oqis3mRtqpnb6cXqd4Eo9lYEs-NSrPlVk/32JIZViDhHDDp5UMKdY5vXN+YX++8+/ZPvs-NTQpX7xf2jCqGA/qHpD9UPrjZHT3e61jzPbd+t6qybE-NT39f1se1ZcxFI27nQ3vyo9z8kB7obZsyLSs4zwYYXg-NUoF3u9ZVSgkswALP20LsGkonreU61vt9o6U0YhUVsU-NVLKTY+dJGPKYgwQKfEBs/f2iHlQdV9/xINf08r/3qc-NVOXfnc1ldXfJwtrALft0ef26EbcXLjOpM8ET36oRYM-NVexKGEiDioMQWT/mzTwRdn3RdCfchilRKM85252aq0-NWGZ3jNRJmRRqUeQ+CWaFsbI2V7Tgu1TiLDKvvkMCvs-NWKt9tic68s8wLTk1Ebj9fM5r3FJ8Gk2kvh4wWidwoY-NWxR2WBAzWXqulvJD4PaJ6CE0IhPPScrBr9CVqkmSlA-NXPwg5H2JbqqZxvapoG+FkiNGWQlBWMjEpQJKb/64TQ-NXyNq7D8zzQtTHUGGmAVSs8fK6dxttXa7xHNiuKNfIM-NX2bujw8uIu8zegaX9nbgCPWObMkV1xX+7zJaStGmpg-NYhO9iDnkSFbfVraWV+8p7UIQUwBe7u2hm9gblLPMk4-NYp4OxdJFsSYYDRGXqWB51q39o0NpcM89GCTrkOO6yo-NZZq/xzQyxO8WKh1JXaa+8yeZKaepo99Ulu/xCAtbCg-NaddJW5/OQUdeWJiqFCSc89nhuJZcF4NAhS9pbuUOxg-NbN+7FQHtPCLna1FuK8hcebSbrFeeykCwt7/RQrOOfE-NbVMHbDCevm6HdL7qQ2231UzQvov24lvIUAxT5WIowU-NbZBTuG5/9AfGTfIVbRlLEzAcXjTTubOF3plqIYSPvU-Nb24wc60ki+BbfZG7meJ7hNHTn/WPF0HdWmysj/tVtU-NdxskjTghhysvMgHIrvdgWw4A1TLt0MK/HMOVeekkNU-NeMQiMeSmGZXdxlA0kps658sw4XNVmgB2czM0DDb0rc-NedsithLgRh

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Thread information set: HideFromDebugger	Jump to behavior

Found API chain indicative of debugger detection

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe

Debugger detection routine: QueryPerformanceCounter, DebugActiveProcess, DecisionNodes, ExitProcess or Sleep

graph_13-5141

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

Code function: 0_2_00693D4B IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_00693D4B

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe

Code function: 11_2_6E478CA0 EntryPoint,LoadLibraryA,GetProcAddress,VirtualProtect,VirtualProtect,

11_2_6E478CA0

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

Code function: 0_2_006A3B7C mov eax, dword ptr fs:[00000030h]

0_2_006A3B7C

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Code function: 0_2_00693D4B IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00693D4B
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Code function: 0_2_00689ABA SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00689ABA
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 2_2_6E2E4D60 TlsGetValue,CloseHandle,CloseHandle,CloseHandle,pthread_mutex_destroy,TlsSetValue,RtlRemoveVectoredExceptionHandler,RtlAddVectoredExceptionHandler,CloseHandle,CloseHandle,pthread_mutex_destroy,CloseHandle,pthread_mutex_destroy,pthread_mutex_destroy,	2_2_6E2E4D60
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 2_2_6E2E4E68 RtlAddVectoredExceptionHandler,	2_2_6E2E4E68
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 2_2_6E2E7E60 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,abort,	2_2_6E2E7E60
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 2_2_6E2E7E5C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,abort,	2_2_6E2E7E5C
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E383550 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,abort,	11_2_6E383550
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 11_2_6E38354C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,abort,	11_2_6E38354C
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 13_2_6DB24D60 TlsGetValue,CloseHandle,CloseHandle,CloseHandle,pthread_mutex_destroy,TlsSetValue,RtlRemoveVectoredExceptionHandler,RtlAddVectoredExceptionHandler,CloseHandle,CloseHandle,pthread_mutex_destroy,CloseHandle,pthread_mutex_destroy,pthread_mutex_destroy,	13_2_6DB24D60
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 13_2_6DB27E60 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,abort,	13_2_6DB27E60
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 13_2_6DB24E68 RtlAddVectoredExceptionHandler,	13_2_6DB24E68
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Code function: 13_2_6DB27E5C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,abort,	13_2_6DB27E5C

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 185.225.68.133 443	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 66.111.2.16 9001	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 149.56.141.138 9001	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 95.216.19.206 443	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 89.163.146.190 9001	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 85.230.178.139 443	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 62.133.35.244 9001	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 88.214.35.62 443	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 154.35.175.225 443	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 31.121.161.188 888	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Network Connect: 37.252.187.111 443	Jump to behavior

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior
Source: C:\Users\user\Desktop\y8uLBHoe4J.exe	Process created: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe "C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc	Jump to behavior

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\torrc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\torrc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\torrc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\data\state VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-certs VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdescs.new VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\torrc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\torrc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\torrc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\data\state VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-certs VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdescs.new VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	Queries volume information: C:\Users\user\AppData\Local\a31a93ae\tor\torrc VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe

Code function: 11_2_6E371AC0 cpuid

11_2_6E371AC0

Source: C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\y8uLBHoe4J.exe

Code function: 0_2_0068AA48 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_0068AA48

Stealing of Sensitive Information

Yara detected BitRAT

Source: Yara match	File source: y8uLBHoe4J.exe, type: SAMPLE
Source: Yara match	File source: 0.2.y8uLBHoe4J.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.y8uLBHoe4J.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: Process Memory Space: y8uLBHoe4J.exe PID: 7076, type: MEMORYSTR

Remote Access Functionality

Yara detected BitRAT

Source: Yara match	File source: y8uLBHoe4J.exe, type: SAMPLE
Source: Yara match	File source: 0.2.y8uLBHoe4J.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.y8uLBHoe4J.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: Process Memory Space: y8uLBHoe4J.exe PID: 7076, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	2 Command and Scripting Interpreter	Path Interception	111 Process Injection	1 Masquerading	1 Input Capture	1 System Time Discovery	Remote Services	1 Input Capture	Exfiltration Over Other Network Medium	12 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	2 Native API	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	22 Virtualization/Sandbox Evasion	LSASS Memory	311 Security Software Discovery	Remote Desktop Protocol	11 Archive Collected Data	Exfiltration Over Bluetooth	1 Non-Standard Port	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	111 Process Injection	Security Account Manager	22 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Multi-hop Proxy	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	11 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Non-Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	11 Software Packing	LSA Secrets	1 Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	12 Application Layer Protocol	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	1 System Network Configuration Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	1 Proxy	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Compile After Delivery	DCSync	1 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	23 System Information Discovery	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
y8uLBHoe4J.exe	68%	Virustotal		Browse
y8uLBHoe4J.exe	74%	ReversingLabs	Win32.Trojan.Phonzy
y8uLBHoe4J.exe	100%	Avira	TR/Redcap.cskpb
y8uLBHoe4J.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	100%	Avira	TR/Redcap.cskpb
C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	32%	Metadefender		Browse
C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe	63%	ReversingLabs	Win32.Trojan.TrickBot
C:\Users\user\AppData\Local\a31a93ae\tor\libcrypto-1_1.dll	0%	Metadefender		Browse
C:\Users\user\AppData\Local\a31a93ae\tor\libcrypto-1_1.dll	4%	ReversingLabs
C:\Users\user\AppData\Local\a31a93ae\tor\libevent-2-1-6.dll	3%	Metadefender		Browse
C:\Users\user\AppData\Local\a31a93ae\tor\libevent-2-1-6.dll	7%	ReversingLabs
C:\Users\user\AppData\Local\a31a93ae\tor\libgcc_s_sjlj-1.dll	0%	Metadefender		Browse
C:\Users\user\AppData\Local\a31a93ae\tor\libgcc_s_sjlj-1.dll	4%	ReversingLabs
C:\Users\user\AppData\Local\a31a93ae\tor\libssl-1_1.dll	0%	Metadefender		Browse
C:\Users\user\AppData\Local\a31a93ae\tor\libssl-1_1.dll	7%	ReversingLabs
C:\Users\user\AppData\Local\a31a93ae\tor\libssp-0.dll	0%	Metadefender		Browse
C:\Users\user\AppData\Local\a31a93ae\tor\libssp-0.dll	3%	ReversingLabs
C:\Users\user\AppData\Local\a31a93ae\tor\libwinpthread-1.dll	0%	Metadefender		Browse
C:\Users\user\AppData\Local\a31a93ae\tor\libwinpthread-1.dll	4%	ReversingLabs
C:\Users\user\AppData\Local\a31a93ae\tor\zlib1.dll	0%	Metadefender		Browse
C:\Users\user\AppData\Local\a31a93ae\tor\zlib1.dll	0%	ReversingLabs

Unpacked PE Files

Source	Detection	Scanner	Label	Download
18.2.dllhost.exe.6dbb0000.2.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
14.2.dllhost.exe.6dcc0000.3.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
22.2.dllhost.exe.6dcc0000.3.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
22.2.dllhost.exe.6dde0000.5.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
11.2.dllhost.exe.260000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
11.2.dllhost.exe.6e5a0000.5.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
22.2.dllhost.exe.260000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
14.2.dllhost.exe.260000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
2.2.dllhost.exe.260000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
13.2.dllhost.exe.260000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
21.2.dllhost.exe.6dde0000.5.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
18.2.dllhost.exe.260000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
22.2.dllhost.exe.6dbb0000.2.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
13.2.dllhost.exe.6dbb0000.2.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.2.y8uLBHoe4J.exe.400000.0.unpack	100%	Avira	TR/Redcap.cskpb	Download File
21.2.dllhost.exe.260000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
14.2.dllhost.exe.6dde0000.5.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
21.2.dllhost.exe.6dcc0000.3.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
18.2.dllhost.exe.6dcc0000.3.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.0.y8uLBHoe4J.exe.400000.0.unpack	100%	Avira	TR/Redcap.cskpb	Download File
11.2.dllhost.exe.6e480000.3.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
14.2.dllhost.exe.6dbb0000.2.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
21.2.dllhost.exe.6dbb0000.2.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
13.2.dllhost.exe.6dcc0000.3.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
2.2.dllhost.exe.6e480000.3.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
2.2.dllhost.exe.6e5a0000.5.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
18.2.dllhost.exe.6dde0000.5.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
13.2.dllhost.exe.6dde0000.5.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
2.2.dllhost.exe.6e370000.2.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.3.y8uLBHoe4J.exe.2b9f180.3.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
11.2.dllhost.exe.6e370000.2.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://wiki.torprojec	0%	Avira URL Cloud	safe
http://freehaven.net/anonbib/#hs-attack06	0%	URL Reputation	safe
http://ipecho.net/plain	0%	Virustotal		Browse
http://ipecho.net/plain	0%	Avira URL Cloud	safe
tcki6mrrcnrt33qy52viv7m64y6hepkv646nnzglrkbgytyt6b2hdrid.onion	0%	Avira URL Cloud	safe
http://tools.feron.it/php/ip.php	4%	Virustotal		Browse
http://tools.feron.it/php/ip.php	0%	Avira URL Cloud	safe
http://ip.anysrc.net/plain/clientip	0%	Avira URL Cloud	safe
https://www.torproject.o	0%	Avira URL Cloud	safe
http://checkip.amazonaws.com%Y	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
myexternalip.com	34.117.59.81	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
tcki6mrrcnrt33qy52viv7m64y6hepkv646nnzglrkbgytyt6b2hdrid.onion	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://myexternalip.com/rawo	y8uLBHoe4J.exe, 00000000.00000002.579464660.00000000043A6000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.530219958.00000000043A6000.00000004.00000001.00020000.00000000.sdmp	false		high
https://myexternalip.com/raw.	y8uLBHoe4J.exe, 00000000.00000002.579464660.00000000043A6000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.530219958.00000000043A6000.00000004.00000001.00020000.00000000.sdmp	false		high
https://wiki.torproject.org/TheOnionRouter/TorFAQ#SOCKSAndDNS.%s	dllhost.exe, 00000002.00000002.424141367.0000000000261000.00000040.00000001.01000000.00000004.sdmp	false		high
http://wtfismyip.com/text3	y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://wiki.torprojec	dllhost.exe	false	Avira URL Cloud: safe	unknown
http://ipv4.icanhazip.com	y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.torproject.org/	dllhost.exe	false		high
https://trac.torproject.org/8742	dllhost.exe	false		high
http://freehaven.net/anonbib/#hs-attack06	dllhost.exe	false	URL Reputation: safe	unknown
https://curl.haxx.se/docs/http-cookies.html	y8uLBHoe4J.exe, 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmp, y8uLBHoe4J.exe, 00000000.00000000.301658040.00000000006E0000.00000002.00000001.01000000.00000003.sdmp	false		high
http://ipecho.net/plain	y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://blog.torproject.org/blog/lifecycle-of-a-new-relay	dllhost.exe	false		high
https://myexternalip.com/raw	y8uLBHoe4J.exe, 00000000.00000002.578610662.0000000002B95000.00000004.00000800.00020000.00000000.sdmp	false		high
http://api.ipify.org	y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myexternalip.com/N	y8uLBHoe4J.exe, 00000000.00000002.578610662.0000000002B95000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ipinfo.io/ip	y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myexternalip.com/rawQY6	y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.torproject.org/download/download#warningalphabetaThis	dllhost.exe, 00000002.00000002.424141367.0000000000261000.00000040.00000001.01000000.00000004.sdmp	false		high
http://mingw-w64.sourceforge.net/X	y8uLBHoe4J.exe, 00000000.00000003.317622348.0000000002BA0000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000000.301751028.00000000007A9000.00000002.00000001.01000000.00000003.sdmp, y8uLBHoe4J.exe, 00000000.00000003.317747468.0000000002B71000.00000004.00000800.00020000.00000000.sdmp, dllhost.exe, 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmp, dllhost.exe, 00000012.00000002.541234634.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmp	false		high
http://www.zlib.net/D	y8uLBHoe4J.exe, 00000000.00000000.301751028.00000000007A9000.00000002.00000001.01000000.00000003.sdmp, y8uLBHoe4J.exe, 00000000.00000003.318995723.0000000002B71000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.319081149.0000000000EC5000.00000004.00000020.00020000.00000000.sdmp, dllhost.exe, 00000002.00000002.434629760.000000006FF53000.00000004.00000001.01000000.0000000B.sdmp	false		high
https://blog.torproject.org/blog/lifecycle-of-a-new-relayCan	dllhost.exe, 00000002.00000002.424141367.0000000000261000.00000040.00000001.01000000.00000004.sdmp	false		high
http://checkip.amazonaws.com	y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://trac.torproject.org/proj	dllhost.exe	false		high
https://wiki.torproject.org/TheOnionRouter/TorFAQ#SOCKSAndDNS.%sDANGEROUS_SOCKS	dllhost.exe, 00000002.00000002.424141367.0000000000261000.00000040.00000001.01000000.00000004.sdmp	false		high
https://www.torproject.org/documentation.html	dllhost.exe	false		high
http://tools.feron.it/php/ip.php	y8uLBHoe4J.exe, 00000000.00000002.578610662.0000000002B95000.00000004.00000800.00020000.00000000.sdmp	false	4%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://myexternalip.com/F	y8uLBHoe4J.exe, 00000000.00000002.578610662.0000000002B95000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.openssl.org/H	y8uLBHoe4J.exe, 00000000.00000003.548450032.000000000446D000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.529997360.0000000002BB6000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.444245058.0000000002BB6000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.529868552.00000000043D4000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.314349132.0000000002BDE000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.443724243.00000000043DF000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.443808857.000000000445E000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.550960808.00000000043D4000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000000.301751028.00000000007A9000.00000002.00000001.01000000.00000003.sdmp, y8uLBHoe4J.exe, 00000000.00000003.423939443.0000000004391000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549022840.00000000043D4000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.551170062.000000000446D000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.446459477.000000000446D000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.424142443.0000000002BB6000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.445981092.00000000044DB000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.314524145.0000000002B71000.00000004.00000800.00020000.00000000.sdmp, dllhost.exe, 00000002.00000002.431494202.000000006E599000.00000004.00000001.01000000.00000007.sdmp, dllhost.exe, 00000002.00000002.434497083.000000006E91E000.00000004.00000001.01000000.00000005.sdmp	false		high
https://trac.torproject.org/projects/tor/ticket/21155.	dllhost.exe	false		high
http://ip.anysrc.net/plain/clientip	y8uLBHoe4J.exe, 00000000.00000002.578503247.0000000002B70000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.torproject.org/download/download#warning	dllhost.exe	false		high
http://bot.whatismyipaddress.com	y8uLBHoe4J.exe, 00000000.00000002.578610662.0000000002B95000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.torproject.o	dllhost.exe	false	Avira URL Cloud: safe	unknown
https://myexternalip.com/rawiYN	y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://wtfismyip.com/text	y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.torproject.org/docs/faq.html#BestOSForRelay	dllhost.exe	false		high
http://checkip.amazonaws.com%Y	y8uLBHoe4J.exe, 00000000.00000003.551082435.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.549126322.000000000445F000.00000004.00000800.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000002.579741798.000000000445F000.00000004.00000001.00020000.00000000.sdmp, y8uLBHoe4J.exe, 00000000.00000003.548922575.000000000445F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://trac.torproject.org/projects/tor/ticket/14917.	dllhost.exe, 00000002.00000002.424141367.0000000000261000.00000040.00000001.01000000.00000004.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.225.68.133	unknown	Hungary	30836	NET23-ASHU	true
66.111.2.16	unknown	United States	11403	NYINTERNETUS	true
149.56.141.138	unknown	Canada	16276	OVHFR	true
34.117.59.81	myexternalip.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
95.216.19.206	unknown	Germany	24940	HETZNER-ASDE	true
89.163.146.190	unknown	Germany	24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	true
85.230.178.139	unknown	Sweden	2119	TELENOR-NEXTELTelenorNorgeASNO	true
62.133.35.244	unknown	Netherlands	136782	PINGTAN-AS-APKirinNetworksCN	true
88.214.35.62	unknown	Russian Federation	209805	SBCLOUDRU	true
154.35.175.225	unknown	United States	14987	RETHEMHOSTINGUS	true
31.121.161.188	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	true
37.252.187.111	unknown	Austria	44133	IPAX-ASAT	true

Private

IP
127.0.0.1

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	563182
Start date:	31.01.2022
Start time:	10:01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 13m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	y8uLBHoe4J.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@15/21@1/13
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 13.1% (good quality ratio 9.4%) Quality average: 53.7% Quality standard deviation: 41.1%
HCA Information:	Failed
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, wuapihost.exe
Excluded domains from analysis (whitelisted): ris.api.iris.microsoft.com, fs.microsoft.com, ctldl.windowsupdate.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, arc.msn.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
10:02:18	API Interceptor	914x Sleep call for process: y8uLBHoe4J.exe modified

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-certs (copy)

Download File

Process:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	20883
Entropy (8bit):	6.052449168892701
Encrypted:	false
SSDEEP:	384:yd4gfOVo1hvSJU4WVG1h6NQd24NVjI1h17bJE10IU4mV91hCRL/7/4zdVIofNL1/:y3fOeDSmzImM2UWx7NEC3jneRD4dtfN1
MD5:	493203887859E52A51FE17DDD5D39E2D
SHA1:	DBAE9797CE642638B430A63AAD7E5725FA0343A0
SHA-256:	AC5A221F622984E8D4573E139DFEAB432EA24E936463FE4F0A6F3AC078F49E7C
SHA-512:	A7BE9649865D4EBF1242B0001CA15CE33F328FF0B19D4A85303CD3E7B83F5133E73A74DDE4EDA6048D526DA90A3E1FBA6A1F923AB170FEB3DEE3066DF1417B29
Malicious:	false
Reputation:	unknown
Preview:	dir-key-certificate-version 3..fingerprint 14C131DFC5C6F93646BE72FA1401C02A8DF2E8B4..dir-key-published 2021-09-01 00:00:00..dir-key-expires 2022-03-01 00:00:00..dir-identity-key..-----BEGIN RSA PUBLIC KEY-----..MIIBigKCAYEA7cZXvDRxfjDYtr9/9UsQ852+6cmHMr8VVh8GkLwbq3RzqjkULwQ2..R9mFvG4FnqMcMKXi62rYYA3fZL1afhT804cpvyp/D3dPM8QxW88fafFAgIFP4LiD..0JYjnF8cva5qZ0nzlWnMXLb32IXSvsGSE2FRyAV0YN9a6k967LSgCfUnZ+IKMezW..1vhL9YK4QIfsDowgtVsavg63GzGmA7JvZmn77+/J5wKz11vGr7Wttf8XABbH2taX..O9j/KGBOX2OKhoF3mXfZSmUO2dV9NMwtkJ7zD///Ny6sfApWV6kVP4O9TdG3bAsl..+fHCoCKgF/jAAWzh6VckQTOPzQZaH5aMWfXrDlzFWg17MjonI+bBTD2Ex2pHczzJ..bN7coDMRH2SuOXv8wFf27KdUxZ/GcrXSRGzlRLygxqlripUanjVGN2JvrVQVr0kz..pjNjiZl2z8ZyZ5d4zQuBi074JPGgx62xAstP37v1mPw14sIWfLgY16ewYuS5bCxV..lyS28jsPht9VAgMBAAE=..-----END RSA PUBLIC KEY-----..dir-signing-key..-----BEGIN RSA PUBLIC KEY-----..MIIBigKCAYEA+jzmadukj4Q0qLgJ0at+nDXGruO5JD3HsehobiwO8HrdaaImY+rY..CZzxRWM4xryQ2AFuAGbSxGoNQT3dTLvjKNVdGY6jPzlS7vxKbPeNZtc/YMvfZ+Fx..uEjvaZ6nDbviVtQhtE0J2EZ32n90

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-certs.tmp

Download File

Process:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	20883
Entropy (8bit):	6.052449168892701
Encrypted:	false
SSDEEP:	384:yd4gfOVo1hvSJU4WVG1h6NQd24NVjI1h17bJE10IU4mV91hCRL/7/4zdVIofNL1/:y3fOeDSmzImM2UWx7NEC3jneRD4dtfN1
MD5:	493203887859E52A51FE17DDD5D39E2D
SHA1:	DBAE9797CE642638B430A63AAD7E5725FA0343A0
SHA-256:	AC5A221F622984E8D4573E139DFEAB432EA24E936463FE4F0A6F3AC078F49E7C
SHA-512:	A7BE9649865D4EBF1242B0001CA15CE33F328FF0B19D4A85303CD3E7B83F5133E73A74DDE4EDA6048D526DA90A3E1FBA6A1F923AB170FEB3DEE3066DF1417B29
Malicious:	false
Reputation:	unknown
Preview:	dir-key-certificate-version 3..fingerprint 14C131DFC5C6F93646BE72FA1401C02A8DF2E8B4..dir-key-published 2021-09-01 00:00:00..dir-key-expires 2022-03-01 00:00:00..dir-identity-key..-----BEGIN RSA PUBLIC KEY-----..MIIBigKCAYEA7cZXvDRxfjDYtr9/9UsQ852+6cmHMr8VVh8GkLwbq3RzqjkULwQ2..R9mFvG4FnqMcMKXi62rYYA3fZL1afhT804cpvyp/D3dPM8QxW88fafFAgIFP4LiD..0JYjnF8cva5qZ0nzlWnMXLb32IXSvsGSE2FRyAV0YN9a6k967LSgCfUnZ+IKMezW..1vhL9YK4QIfsDowgtVsavg63GzGmA7JvZmn77+/J5wKz11vGr7Wttf8XABbH2taX..O9j/KGBOX2OKhoF3mXfZSmUO2dV9NMwtkJ7zD///Ny6sfApWV6kVP4O9TdG3bAsl..+fHCoCKgF/jAAWzh6VckQTOPzQZaH5aMWfXrDlzFWg17MjonI+bBTD2Ex2pHczzJ..bN7coDMRH2SuOXv8wFf27KdUxZ/GcrXSRGzlRLygxqlripUanjVGN2JvrVQVr0kz..pjNjiZl2z8ZyZ5d4zQuBi074JPGgx62xAstP37v1mPw14sIWfLgY16ewYuS5bCxV..lyS28jsPht9VAgMBAAE=..-----END RSA PUBLIC KEY-----..dir-signing-key..-----BEGIN RSA PUBLIC KEY-----..MIIBigKCAYEA+jzmadukj4Q0qLgJ0at+nDXGruO5JD3HsehobiwO8HrdaaImY+rY..CZzxRWM4xryQ2AFuAGbSxGoNQT3dTLvjKNVdGY6jPzlS7vxKbPeNZtc/YMvfZ+Fx..uEjvaZ6nDbviVtQhtE0J2EZ32n90

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdesc-consensus (copy)

Download File

Process:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	2350030
Entropy (8bit):	5.626325684793283
Encrypted:	false
SSDEEP:	12288:2vByl/PiIXqP/GH3vWbeE+b1/XWV4Reg5fNh/uQxe8bX0Lop:2vBydPXC/23v1XWqDhde8bl
MD5:	2C40FE093C7671E2B18D032EE39F18A0
SHA1:	AC0E33278F74FA3636E503F117BB8ECFB4806FA3
SHA-256:	5D40EA267B402E2D0330BE9A86D36B7DFD883ADBBC3996ED347A94F651D30C35
SHA-512:	B4EED588F8308209014C4C422A26366069180F3C32AC2203126AC9CAC463797D7F92C1280DCCBA94A6432EE35F763250B82C1805CF7B164942BDA717A2B4A63D
Malicious:	false
Reputation:	unknown
Preview:	network-status-version 3 microdesc.vote-status consensus.consensus-method 31.valid-after 2022-01-31 08:00:00.fresh-until 2022-01-31 09:00:00.valid-until 2022-01-31 11:00:00.voting-delay 300 300.client-versions 0.3.5.10,0.3.5.11,0.3.5.12,0.3.5.13,0.3.5.14,0.3.5.15,0.3.5.16,0.3.5.17,0.3.5.18,0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.6.1-alpha,0.4.6.2-alpha,0.4.6.3-rc,0.4.6.4-rc,0.4.6.5,0.4.6.6,0.4.6.7,0.4.6.8,0.4.6.9,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha.server-versions 0.3.5.10,0.3.5.11,0.3.5.12,0.3.5.13,0.3.5.14,0.3.5.15,0.3.5.16,0.3.5.17,0.3.5.18,0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.6.1-alpha,0.4.6.2-alpha,0.4.6.3-rc,0.4.6.4-rc,0.4.6.5,0.4.6.6,0.4.6.7,0.4.6.8,0.4.6.9,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha.known-flags Authority BadExit Exit Fast Guard HSDir NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-clien

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdesc-consensus.tmp

Download File

Process:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	2350030
Entropy (8bit):	5.626325684793283
Encrypted:	false
SSDEEP:	12288:2vByl/PiIXqP/GH3vWbeE+b1/XWV4Reg5fNh/uQxe8bX0Lop:2vBydPXC/23v1XWqDhde8bl
MD5:	2C40FE093C7671E2B18D032EE39F18A0
SHA1:	AC0E33278F74FA3636E503F117BB8ECFB4806FA3
SHA-256:	5D40EA267B402E2D0330BE9A86D36B7DFD883ADBBC3996ED347A94F651D30C35
SHA-512:	B4EED588F8308209014C4C422A26366069180F3C32AC2203126AC9CAC463797D7F92C1280DCCBA94A6432EE35F763250B82C1805CF7B164942BDA717A2B4A63D
Malicious:	false
Reputation:	unknown
Preview:	network-status-version 3 microdesc.vote-status consensus.consensus-method 31.valid-after 2022-01-31 08:00:00.fresh-until 2022-01-31 09:00:00.valid-until 2022-01-31 11:00:00.voting-delay 300 300.client-versions 0.3.5.10,0.3.5.11,0.3.5.12,0.3.5.13,0.3.5.14,0.3.5.15,0.3.5.16,0.3.5.17,0.3.5.18,0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.6.1-alpha,0.4.6.2-alpha,0.4.6.3-rc,0.4.6.4-rc,0.4.6.5,0.4.6.6,0.4.6.7,0.4.6.8,0.4.6.9,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha.server-versions 0.3.5.10,0.3.5.11,0.3.5.12,0.3.5.13,0.3.5.14,0.3.5.15,0.3.5.16,0.3.5.17,0.3.5.18,0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.6.1-alpha,0.4.6.2-alpha,0.4.6.3-rc,0.4.6.4-rc,0.4.6.5,0.4.6.6,0.4.6.7,0.4.6.8,0.4.6.9,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha.known-flags Authority BadExit Exit Fast Guard HSDir NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-clien

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdescs (copy)

Download File

Process:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	6053796
Entropy (8bit):	5.293508913336913
Encrypted:	false
SSDEEP:	24576:Z9QtknHVVXZEa3I55hqfa0mqcZgHg89Rl1FNa0IgLTEyEY/boreIYJ76t9hejt7y:38j8NYLR2g
MD5:	5E13973FB4640D408A61ED4F39901259
SHA1:	6C8C7AB163D150AF9E31DE10BC70F66DA8C3AF7B
SHA-256:	B10AFE429D4347A9FE863696F86DE3BCDB12F9798A3272964FF7EDA0B6F8D19E
SHA-512:	6BEFC4F87F718148DF54BBEC87BB3E350A422D03DD1E72F69B03EBD110E2C9A44580C69ADBFB6B765BA157251EDA44FCCCCAA02A6CBC1D4B1236811BC3B26C59
Malicious:	false
Reputation:	unknown
Preview:	@last-listed 2022-01-31 18:02:29.onion-key.-----BEGIN RSA PUBLIC KEY-----.MIGJAoGBAKuK71k5sS8JHE7if20aoddxC8Z3saYkM4QrMTNHkrhpmghgDItkktDH.20x+TeCCQRWKLZ0raGDbAFXkUxDm6UUvVa6Qd3n64ydHqn8ISdu+BvF9TSHmivQk.mDwCcSAZAJKeY/tFg1zcVHlwYF04NgMmScrLp3xNWKKPzshcgvPVAgMBAAE=.-----END RSA PUBLIC KEY-----.ntor-onion-key JOoJWYSlVRTMfMONz/uZo50DBKusulVWj7V5nsDZQTA.family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

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdescs.new

Download File

Process:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	3070727
Entropy (8bit):	5.315983770727527
Encrypted:	false
SSDEEP:	24576:xwHvwA5pfYvfFxIlpwr9FUelXZaXLFygSiVglnLTdzymot71cWhS5fAb5HB0kWGG:96F8mW1
MD5:	D7A4189948F47596D3AB5D9B80FC9306
SHA1:	2C6D5D573729B9C3EF800249EA22EC1F3D4D1E67
SHA-256:	848035629BC76CE8D0AC3FFA02C6426079B05D16F3A0AC67B50CBBBE17DB2D52
SHA-512:	8D55D4BABA24A3C20640260A95FEDD7D8FA77B70C2B1DDB5741F391CC63A9A4F102A08FC596EAED1B362605B248A1CBC285B55702DDD454079F278C43CCC1A5D
Malicious:	false
Reputation:	unknown
Preview:	@last-listed 2022-01-31 18:03:30.onion-key.-----BEGIN RSA PUBLIC KEY-----.MIGJAoGBAMXluQLJuoglEAjMYtYo/vjDFB3SS4Watr8Q9P5LwhF/h3fqxT2uirKH.1wb+S27h/8YimMgOBj5N8j81kSMqajDSPoFK2jfAI6l3DfudjSrv+hI6fqN/C/BW.DqpitNxPa5AkgyIsaDoQOhSUNo87yGUkYu2O5uvUJCz9Qsa2gY01AgMBAAE=.-----END RSA PUBLIC KEY-----.ntor-onion-key u+9oAqblmGzSdgHsPVrscbSZZG2rQllsEtwWjzIChQs.id ed25519 3FozoH7HdZ+MP6UHa4HjBEW84ClWTiCbeiQxyIRmNCM.@last-listed 2022-01-31 18:03:30.onion-key.-----BEGIN RSA PUBLIC KEY-----.MIGJAoGBAJv5qvtb+QOPpVeNv4s8Bf7+oocs5alt5GUtfyq2RJSvsWibZM9vLWb6.zyA4AW4QHVSmN9uCj++p0VBU6CbXMzCWT0NPT31jqgCipqA5bRY6mVwzi4t9smCa.5szuCsj6PIs5C8P++Ur+tj3krnlMWQFOQeJkhA9waEKd4gudVtB3AgMBAAE=.-----END RSA PUBLIC KEY-----.ntor-onion-key 8F9IXokSVyAE06a1iX+uxXTZ95RJNEGBY33gPiZdzi4.p reject 25,119,135-139,445,465,563,587,1214,4661-4666,4672,6346-6429,6699,6881-6999,10000.p6 reject 25,119,135-139,445,465,563,587,1214,4661-4666,4672,6346-6429,6699,6881-6999,10000.id ed25519 4hz5I4cuZUC7NuSgix0srExSSHjgoleSzUtTOH9YJV0.@

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdescs.tmp

Download File

Process:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	6053796
Entropy (8bit):	5.293508913336913
Encrypted:	false
SSDEEP:	24576:Z9QtknHVVXZEa3I55hqfa0mqcZgHg89Rl1FNa0IgLTEyEY/boreIYJ76t9hejt7y:38j8NYLR2g
MD5:	5E13973FB4640D408A61ED4F39901259
SHA1:	6C8C7AB163D150AF9E31DE10BC70F66DA8C3AF7B
SHA-256:	B10AFE429D4347A9FE863696F86DE3BCDB12F9798A3272964FF7EDA0B6F8D19E
SHA-512:	6BEFC4F87F718148DF54BBEC87BB3E350A422D03DD1E72F69B03EBD110E2C9A44580C69ADBFB6B765BA157251EDA44FCCCCAA02A6CBC1D4B1236811BC3B26C59
Malicious:	false
Reputation:	unknown
Preview:	@last-listed 2022-01-31 18:02:29.onion-key.-----BEGIN RSA PUBLIC KEY-----.MIGJAoGBAKuK71k5sS8JHE7if20aoddxC8Z3saYkM4QrMTNHkrhpmghgDItkktDH.20x+TeCCQRWKLZ0raGDbAFXkUxDm6UUvVa6Qd3n64ydHqn8ISdu+BvF9TSHmivQk.mDwCcSAZAJKeY/tFg1zcVHlwYF04NgMmScrLp3xNWKKPzshcgvPVAgMBAAE=.-----END RSA PUBLIC KEY-----.ntor-onion-key JOoJWYSlVRTMfMONz/uZo50DBKusulVWj7V5nsDZQTA.family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

C:\Users\user\AppData\Local\a31a93ae\tor\data\state (copy)

Download File

Process:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3164
Entropy (8bit):	5.34508603601455
Encrypted:	false
SSDEEP:	48:ckACuE89le+ZjrDsJu3jHqsS3TOfRG+Qex:bACulle+drDDjKsTMRg
MD5:	36F6C1A66A1291E798EE9476DAA59F2F
SHA1:	32F1513A4951DA2F5DD0242F70A1275E926B474D
SHA-256:	61325B9DE2A3BFFC4E217E78959A6D453BFC3F8365E1885A890C68271817BA1D
SHA-512:	BED1D34DCCE881987816FDCE50D1B7D7E681D9274DB3377043D3B7254AC7ABF7A9387023AADE7CB5CDF8C330C272C0E377EE45917CAF02417273C533C92B2C84
Malicious:	false
Reputation:	unknown
Preview:	# Tor state file last generated on 2022-01-31 10:03:31 local time..# Other times below are in UTC..# You do not need to edit this file.....Dormant 0..Guard in=default rsa_id=F0C0E4A578306B0AC21CBC49051D801C66F196BF nickname=RBFTPNetworks sampled_on=2022-01-24T15:56:36 sampled_by=0.4.2.5 listed=1 confirmed_on=2022-01-20T23:21:38 confirmed_idx=0..Guard in=default rsa_id=3BEEDD97C7B00C4BA417A8FAA22F858465E77EBC nickname=DTFNODE38 sampled_on=2022-01-29T06:44:41 sampled_by=0.4.2.5 listed=1..Guard in=default rsa_id=0C11FE3E7EF6C8B89911B31A4123808C2D69FFEC nickname=julianrelay sampled_on=2022-01-25T00:44:14 sampled_by=0.4.2.5 listed=1..Guard in=default rsa_id=72AB7C961CD2AEEB949474CAF88DF5221546D2BF nickname=artikel10ber62 sampled_on=2022-01-24T19:35:17 sampled_by=0.4.2.5 listed=1..Guard in=default rsa_id=09A70E396DE93F54D4541BBB0EC8E2B23761F34F nickname=Deepsky sampled_on=2022-01-20T13:00:46 sampled_by=0.4.2.5 listed=1..Guard in=default rsa_id=E7EF73B4722CFAF0E8AA2151D3AA78701DE5F19B nickn

C:\Users\user\AppData\Local\a31a93ae\tor\data\state.tmp

Download File

Process:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	3164
Entropy (8bit):	5.34508603601455
Encrypted:	false
SSDEEP:	48:ckACuE89le+ZjrDsJu3jHqsS3TOfRG+Qex:bACulle+drDDjKsTMRg
MD5:	36F6C1A66A1291E798EE9476DAA59F2F
SHA1:	32F1513A4951DA2F5DD0242F70A1275E926B474D
SHA-256:	61325B9DE2A3BFFC4E217E78959A6D453BFC3F8365E1885A890C68271817BA1D
SHA-512:	BED1D34DCCE881987816FDCE50D1B7D7E681D9274DB3377043D3B7254AC7ABF7A9387023AADE7CB5CDF8C330C272C0E377EE45917CAF02417273C533C92B2C84
Malicious:	false
Reputation:	unknown
Preview:	# Tor state file last generated on 2022-01-31 10:03:31 local time..# Other times below are in UTC..# You do not need to edit this file.....Dormant 0..Guard in=default rsa_id=F0C0E4A578306B0AC21CBC49051D801C66F196BF nickname=RBFTPNetworks sampled_on=2022-01-24T15:56:36 sampled_by=0.4.2.5 listed=1 confirmed_on=2022-01-20T23:21:38 confirmed_idx=0..Guard in=default rsa_id=3BEEDD97C7B00C4BA417A8FAA22F858465E77EBC nickname=DTFNODE38 sampled_on=2022-01-29T06:44:41 sampled_by=0.4.2.5 listed=1..Guard in=default rsa_id=0C11FE3E7EF6C8B89911B31A4123808C2D69FFEC nickname=julianrelay sampled_on=2022-01-25T00:44:14 sampled_by=0.4.2.5 listed=1..Guard in=default rsa_id=72AB7C961CD2AEEB949474CAF88DF5221546D2BF nickname=artikel10ber62 sampled_on=2022-01-24T19:35:17 sampled_by=0.4.2.5 listed=1..Guard in=default rsa_id=09A70E396DE93F54D4541BBB0EC8E2B23761F34F nickname=Deepsky sampled_on=2022-01-20T13:00:46 sampled_by=0.4.2.5 listed=1..Guard in=default rsa_id=E7EF73B4722CFAF0E8AA2151D3AA78701DE5F19B nickn

C:\Users\user\AppData\Local\a31a93ae\tor\data\unverified-microdesc-consensus (copy)

Download File

Process:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	2350030
Entropy (8bit):	5.626325684793283
Encrypted:	false
SSDEEP:	12288:2vByl/PiIXqP/GH3vWbeE+b1/XWV4Reg5fNh/uQxe8bX0Lop:2vBydPXC/23v1XWqDhde8bl
MD5:	2C40FE093C7671E2B18D032EE39F18A0
SHA1:	AC0E33278F74FA3636E503F117BB8ECFB4806FA3
SHA-256:	5D40EA267B402E2D0330BE9A86D36B7DFD883ADBBC3996ED347A94F651D30C35
SHA-512:	B4EED588F8308209014C4C422A26366069180F3C32AC2203126AC9CAC463797D7F92C1280DCCBA94A6432EE35F763250B82C1805CF7B164942BDA717A2B4A63D
Malicious:	false
Reputation:	unknown
Preview:	network-status-version 3 microdesc.vote-status consensus.consensus-method 31.valid-after 2022-01-31 08:00:00.fresh-until 2022-01-31 09:00:00.valid-until 2022-01-31 11:00:00.voting-delay 300 300.client-versions 0.3.5.10,0.3.5.11,0.3.5.12,0.3.5.13,0.3.5.14,0.3.5.15,0.3.5.16,0.3.5.17,0.3.5.18,0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.6.1-alpha,0.4.6.2-alpha,0.4.6.3-rc,0.4.6.4-rc,0.4.6.5,0.4.6.6,0.4.6.7,0.4.6.8,0.4.6.9,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha.server-versions 0.3.5.10,0.3.5.11,0.3.5.12,0.3.5.13,0.3.5.14,0.3.5.15,0.3.5.16,0.3.5.17,0.3.5.18,0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.6.1-alpha,0.4.6.2-alpha,0.4.6.3-rc,0.4.6.4-rc,0.4.6.5,0.4.6.6,0.4.6.7,0.4.6.8,0.4.6.9,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha.known-flags Authority BadExit Exit Fast Guard HSDir NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-clien

C:\Users\user\AppData\Local\a31a93ae\tor\data\unverified-microdesc-consensus.tmp

Download File

Process:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	2350030
Entropy (8bit):	5.626325684793283
Encrypted:	false
SSDEEP:	12288:2vByl/PiIXqP/GH3vWbeE+b1/XWV4Reg5fNh/uQxe8bX0Lop:2vBydPXC/23v1XWqDhde8bl
MD5:	2C40FE093C7671E2B18D032EE39F18A0
SHA1:	AC0E33278F74FA3636E503F117BB8ECFB4806FA3
SHA-256:	5D40EA267B402E2D0330BE9A86D36B7DFD883ADBBC3996ED347A94F651D30C35
SHA-512:	B4EED588F8308209014C4C422A26366069180F3C32AC2203126AC9CAC463797D7F92C1280DCCBA94A6432EE35F763250B82C1805CF7B164942BDA717A2B4A63D
Malicious:	false
Reputation:	unknown
Preview:	network-status-version 3 microdesc.vote-status consensus.consensus-method 31.valid-after 2022-01-31 08:00:00.fresh-until 2022-01-31 09:00:00.valid-until 2022-01-31 11:00:00.voting-delay 300 300.client-versions 0.3.5.10,0.3.5.11,0.3.5.12,0.3.5.13,0.3.5.14,0.3.5.15,0.3.5.16,0.3.5.17,0.3.5.18,0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.6.1-alpha,0.4.6.2-alpha,0.4.6.3-rc,0.4.6.4-rc,0.4.6.5,0.4.6.6,0.4.6.7,0.4.6.8,0.4.6.9,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha.server-versions 0.3.5.10,0.3.5.11,0.3.5.12,0.3.5.13,0.3.5.14,0.3.5.15,0.3.5.16,0.3.5.17,0.3.5.18,0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.6.1-alpha,0.4.6.2-alpha,0.4.6.3-rc,0.4.6.4-rc,0.4.6.5,0.4.6.6,0.4.6.7,0.4.6.8,0.4.6.9,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha.known-flags Authority BadExit Exit Fast Guard HSDir NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-clien

C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe

Download File

Process:	C:\Users\user\Desktop\y8uLBHoe4J.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
Category:	dropped
Size (bytes):	996352
Entropy (8bit):	7.912146678547723
Encrypted:	false
SSDEEP:	24576:V82yLnYQN5FlyjIJO1UPrb6uFeCyL145gYaw0ZfbFeRkCrqKEV5D:VvuYQNPlNJxOuF1730ZfbUkr
MD5:	5CFE61FF895C7DAA889708665EF05D7B
SHA1:	5E58EFE30406243FBD58D4968B0492DDEEF145F2
SHA-256:	F9C1D18B50CE7484BF212CB61A9035602CFB90EBDFE66A077B9F6DF73196A9F5
SHA-512:	43B6F10391A863A21F70E05CEE41900729C7543750E118FF5D74C0CAC3D1383F10BCB73EADE2A28B555A393CADA4795E204246129B01AD9177D1167827DD68DA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Metadefender, Detection: 32%, Browse Antivirus: ReversingLabs, Detection: 63%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L........................0........0..@...1..0@...@..........................@@...........@... ..............................0@..............................2@..............................,@.....................................................UPX0......0.............................UPX1.....0....1.....................@...UPX2.........0@......0..............@...3.96.UPX!.....W...\..@.\|....>.&7........&......1.f.=....MZ..!....<.l.0.hd..^9..u...b<..oPE......tP.Dp..bt..u2..$]o?..7/.$.,l4......\|.M...=./.L.tK....2t....yb...f...Q.<....~.J=..u....@.v.....v...........~........m./.yt...^.....m.&....7.\..o..,{`.D$.........".................[<.,.^...m.L2....q.U..WV.U.S..Q.......x.57......?...d..0+..x.1....9.......>......v......=...l......^...R.9.f..0.y.Up...}O-I....X.94...].t.......y7........!v..f..p.\|(!..c.=.K..lJ.\.d.....s41..F..M..tD.....+z'..

C:\Users\user\AppData\Local\a31a93ae\tor\libcrypto-1_1.dll

Download File

Process:	C:\Users\user\Desktop\y8uLBHoe4J.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
Category:	dropped
Size (bytes):	1781914
Entropy (8bit):	7.158347735645916
Encrypted:	false
SSDEEP:	49152:uKyA6xLkn84KAFa0ROvosyG/iRO1CPwDv3uFZjhUg2EeJUO9WLQ0u:u86xwnhKAFhovosyo31CPwDv3uFZjhUh
MD5:	2384A02C4A1F7EC481ADDE3A020607D3
SHA1:	7E848D35A10BF9296C8FA41956A3DAA777F86365
SHA-256:	C8DB0FF0F7047ED91B057005E86AD3A23EAE616253313AA047C560D9EB398369
SHA-512:	1AC74DD2D863ACD7415EF8B9490A5342865462FBABDAD0645DA22424B0D56F5E9C389A3D7C41386F2414D6C4715C79A6DDECB6E6CFF29E98319E1FD1060F4503
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 4%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L........X).RT.....!.....0......................@k..........................,...........@... .....................0..D......x..........................t.,. ..................................................................................UPX0....................................UPX1.....0.......$..................@....rsrc...............&..............@...3.96.UPX!....IV..+<.1.......\2.$..i}........$."....,......&........WVSD..D$$..ur..R...~W.......1...B.'.._...({..M.$..r......5B. ...............[........s...[^_.....T...w...d....=..X.1....t<..F9...........1........f0l.5.......K.!..Dt..T$(..............$............bsm>.'6..f..-....;h...;Q....V....v..'J.S.....j!...0{............,fY.bO.;Y......O......7...UW..V..S..R.....?(ui.....BHp.\|.\|4.M4....$&..<B-.\%.6X....)\.(....J.1.:......k....].~..C.m....]...t..>z.............l[.mEp.].v..-

C:\Users\user\AppData\Local\a31a93ae\tor\libevent-2-1-6.dll

Download File

Process:	C:\Users\user\Desktop\y8uLBHoe4J.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed
Category:	dropped
Size (bytes):	375453
Entropy (8bit):	6.942455142300998
Encrypted:	false
SSDEEP:	6144:7+wL9BBhoJgaEr2Y8SIe3V8JNkN7hOXsgZzKm:7z9vwhErYaVeNkN70cgwm
MD5:	099983C13BADE9554A3C17484E5481F1
SHA1:	A84E69AD9722F999252D59D0ED9A99901A60E564
SHA-256:	B65F9AA0C7912AF64BD9B05E9322E994339A11B0C8907E6A6166D7B814BDA838
SHA-512:	89F1A963DE77873296395662D4150E3EFF7A2D297FB9EC54EC06AA2E40D41E5F4FC4611E9BC34126D760C9134F2907FEA3BEBDF2FBBD7EADDAD99F8E4BE1F5E2
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 3%, Browse Antivirus: ReversingLabs, Detection: 7%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L........ .........!.....0...`............... ....<b......................................@... ......................"...X... ...............................z......................................................................................UPX0....................................UPX1.....0.......&..................@...UPX2.....`... ...\...(..............@...3.96.UPX!........o.o.....v"...V..&...}........$.......R......&........WVSD..D$$..ur..R...~W.......1...B.'.._...(...N..r......5......o..........[...Q.....f.[^_.....T........d....=..X.1....t..Z.F9.......w..S..1.....}.N.0l.5........*...Dt..T$(......k..... ..$....`.T...bs....m..f......;h...;Q....a..v..'....\|.S .....a..".........q,....O.;YUD:.........{..UW..V.....S..R...cHui.3\|k..BHp..\|.\|4...M4$..lB-.\..r3%\.)\.._\.(J.1.:...?.G...].~..Cig...m]...=Z..t......<8...Z.l...n!].v..`%.[-\06..)

C:\Users\user\AppData\Local\a31a93ae\tor\libgcc_s_sjlj-1.dll

Download File

Process:	C:\Users\user\Desktop\y8uLBHoe4J.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
Category:	dropped
Size (bytes):	292880
Entropy (8bit):	7.08760501332915
Encrypted:	false
SSDEEP:	6144:1Tlx3jVbWfC7HVtQKCuxvYPRqAxDIoTS2:1Tb3jVb4fuJCz3
MD5:	B0D98F7157D972190FE0759D4368D320
SHA1:	5715A533621A2B642AAD9616E603C6907D80EFC4
SHA-256:	2922193133DABAB5B82088D4E87484E2FAC75E9E0C765DACAF22EB5F4F18B0C5
SHA-512:	41CE56C428158533BF8B8FFE0A71875B5A3ABC549B88D7D3E69ACC6080653ABEA344D6D66FFF39C04BF019FCAA295768D620377D85A933DDAF17F3D90DF29496
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 4%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L..................!.....@.......@.......P.........m......................................@... .....................................................................................................................................................UPX0.....@..............................UPX1.....@...P...@..................@...UPX2.................B..............@...3.96.UPX!........-....i...<......&...m........$..p....1......&........WVS"..D$$..ur..)...~W.c...-...!..../...vL.....09......5.w.o.s..A........-.{?w..z..L..[^_..w.m....*....d...m..o.=W.X.1....t#9.I..4.w.s..q.....1.sH..c....3[6.......{...V."t..T$(......n{.... ..$..e...ag1..........Kxf.\2...m.r.Cp.b.(...r.M8.v....O)..........W......R.C.8.'7Y.....,.O..........'a.UW..V..S..).5....@.ui..!H}...8(\|.\|.p&4$....L,!..\..Z......v....1.\........@].?_.C.6;.......?t.k..C..U.1.Br...l..d.....v......2.

C:\Users\user\AppData\Local\a31a93ae\tor\libssl-1_1.dll

Download File

Process:	C:\Users\user\Desktop\y8uLBHoe4J.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
Category:	dropped
Size (bytes):	450373
Entropy (8bit):	6.9077953346074
Encrypted:	false
SSDEEP:	12288:15D04uko/Sxg3MWFccpVpfVmy3ocIdNyxtw3iFFrS6XL:8fkeh33FccpVp9jxtw3iFFrS6XL
MD5:	C88826AC4BB879622E43EAD5BDB95AEB
SHA1:	87D29853649A86F0463BFD9AD887B85EEDC21723
SHA-256:	C4D898B1A4285A45153AF9ED88D79AA2A073DCB7225961B6B276B532B4D18B6F
SHA-512:	F733041EF35B9B8058FBCF98FAA0D1FEA5C0858FEA941ECEBBE9F083CD73E3E66323AFFFD8D734097FCDD5E6E59DB4D94F51FCA5874EDBCD2A382D9BA6CD97B3
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 7%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L........x.........!.........P.....................j......................................@... ........................4@..........................................................................................................................UPX0....................................UPX1................................@....rsrc....P.......F..................@...3.96.UPX!.........Wa(h......Ey..&...}........$..............&........WVSD..D$$..ur..R...~W.......1...B.'.._...(...O.o.r......5....;;..........[............[^_.....T......~d....=..X.1....tF9.........{.m?..1.....0.7.4l.5.......o_..Dt..T$(......f.... ..$.......6....bsm...>.'f........0....r.;Q.:..e..v..'..S .......".....`].c...q.O.$]d........".{......UW..V..S..R.5\|.\...Hui..BH..3.p...\|4.M4$&r3...B-.\%._\...)\.(J.1.G..:.......?.].~..C.m]..ig...t....=Z.......B....[.]...".v..-..a.J

C:\Users\user\AppData\Local\a31a93ae\tor\libssp-0.dll

Download File

Process:	C:\Users\user\Desktop\y8uLBHoe4J.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
Category:	dropped
Size (bytes):	90333
Entropy (8bit):	6.919951469409257
Encrypted:	false
SSDEEP:	1536:5lZ0qS+fl4CFzLCNfcnleimT+RqMGAI1SWA8yCM0NX2wu:5lzbfpChcPEM8e8yCDX2N
MD5:	2C916456F503075F746C6EA649CF9539
SHA1:	FA1AFC1F3D728C89B2E90E14CA7D88B599580A9D
SHA-256:	CBB5236D923D4F4BAF2F0D2797C72A2CBAE42EF7AC0ACCE786DAF5FDC5B456E6
SHA-512:	1C1995E1AA7C33C597C64122395275861D9219E46D45277D4F1768A2E06227B353D5D77D6B7CB655082DC6FB9736AD6F7CFCC0C90E02776E27D50857E792E3FD
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 3%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L..................!................@{.............h......................................@... ........................l...................................H...............................@}......................................................UPX0....................................UPX1................................@...UPX2................................@...3.96.UPX!.....0U.....2W..'.......&..ym........$..@...........&........WVS"..D$$..ur..)...~W.......1...!..../L.......aP9......5....}C...A.........-......z..L..[^_.....o.......d....=l...W.X.1....t#9.I.ww....s..q.1..s.`s..c...]f.6.......n..d.0."t..T$(....B....... ..$..ev.s.............f.\...m.n,...(...r..>v....O)..}......p.W....p.R3a..8.'..&...,...&.O.........UW..V..S....4t).. ui..!..H8.\|.\|.&.....4$l\!..\.0/..L....;..n..1.\......c..@].?_.C.6..}.....?t...!.k.U.1!9....l...@.~..v....X..L.L.m

C:\Users\user\AppData\Local\a31a93ae\tor\libwinpthread-1.dll

Download File

Process:	C:\Users\user\Desktop\y8uLBHoe4J.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
Category:	dropped
Size (bytes):	192765
Entropy (8bit):	7.258269000752376
Encrypted:	false
SSDEEP:	3072:Vb2IhqYh6ZwXqIXsJHAFXkwbtotutg+UISEyZ0ENrbhESggAEim3YnsVwTivFo:3iIqI+HAvbtjtplhyT41Kim3Y0wTivFo
MD5:	D407CC6D79A08039A6F4B50539E560B8
SHA1:	21171ADBC176DC19AAA5E595CD2CD4BD1DFD0C71
SHA-256:	92CFD0277C8781A15A0F17B7AEE6CFF69631B9606A001101631F04B3381EFC4E
SHA-512:	378A10FED915591445D97C6D04E82D28008D8EA65E0E40C142B8EE59867035D561D4E103495C8F0D9C19B51597706CE0B450C25516AA0F1744579FFCD097AE0C
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 4%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L........z.........!.....0... ... ..PR...0...`.....d......................................@... ......................d......Td.......`..T....................u..............................PT......................................................UPX0..... ..............................UPX1.....0...0...&..................@....rsrc.... ...`.......(..............@...3.96.UPX!...../......W;..8".....&..+m........$........<.....&........WVS"..D$$..ur..)...~W.......1...!..../L........$9......5....}...A........-......z4.L..[^_.....o.......d....=l...W.X.1....t#9.I.ww....s..q.1.Z..fsH..c..mw..6............."t..T$(.......w.... ..$..e.....;.........u_.f.\.,.1...r......(...rv.n6...O).;v{.......W..R...&.C,8.'\|.\|.....O.&_@.........UW..V..S..).].{...,ui..!H8q.Y.\|.p&4$...V~..!..\..7.........1..n{.\.....@...].?_.C.6.N.>....?t.k....U.1......m\|....v.Y s....oC

C:\Users\user\AppData\Local\a31a93ae\tor\torrc

Download File

Process:	C:\Users\user\Desktop\y8uLBHoe4J.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	157
Entropy (8bit):	5.067003692827532
Encrypted:	false
SSDEEP:	3:0rMRxhhEaAvov+9RwWZCvqRq+uy2KZcALRuVTKEWz54RAiIDWXp5cViE2J5EIXRQ:CMRSaQovqRZCvq32KrLRuUDYAiIWXp+N
MD5:	46339D6881D1398E571F0F5D035B8EBA
SHA1:	6C8DB970AAFB3B9846D356EE401F12BBBC93F550
SHA-256:	C54A22001B15D7B3C2485903F1625C3754FB0A51987C4005E685FB85107217E4
SHA-512:	CC14893342FBC171DF94927FAD036514C325336762A3FB5074F926647DE19ACD7E0BBE6B8506526FD574B8DEC27C359597428EEC27BB5943A9EB45A4F2729316
Malicious:	false
Reputation:	unknown
Preview:	SOCKSPort 45808..DirCache 0..ClientUseIPv6 0..ClientOnly 1..SocksTimeout 120..AvoidDiskWrites 1..DataDirectory C:\Users\user\AppData\Local\a31a93ae\tor\data

C:\Users\user\AppData\Local\a31a93ae\tor\zlib1.dll

Download File

Process:	C:\Users\user\Desktop\y8uLBHoe4J.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
Category:	dropped
Size (bytes):	53760
Entropy (8bit):	7.819616972153237
Encrypted:	false
SSDEEP:	768:9dfKEwqfuHtTeSgJZ+d4BlJthH1zs4/rqjc8J7RvrAsUU05Yr7QHN1/poPU:9dCjqvZ+d4Vthx/2cA7RU1Vo2NBpwU
MD5:	ADD33041AF894B67FE34E1DC819B7EB6
SHA1:	6DB46EB021855A587C95479422ADCC774A272EEB
SHA-256:	8688BD7CA55DCC0C23C429762776A0A43FE5B0332DFD5B79EF74E55D4BBC1183
SHA-512:	BAFC441198D03F0E7FE804BAB89283C389D38884D0F87D81B11950A9B79FCBF7B32BE4BB16F4FCD9179B66F865C563C172A46B4514A6087EF0AF64425A4B2CFA
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L..................#.............P.......`...0.....c.........................@............@... .....................p4..\|....3.......0.......................;.. ............................!......................................................UPX0.....P..............................UPX1.........`......................@....rsrc........0......................@...3.96.UPX!.......<................&...m........$........l.....&........WVS"..D$$..ur..)...~W.......1...!..../L........T9......5....}....A.........-......z\.L..[^_.....o...*....d....=l...W.X.1....t#9.I.ww....s..q.1..s.`s..c...]f.6.......n..d.vh"t..T$(....{....... ..$..e......b.......}..f.\.\..m......(...rv.n6...O).;v{.......W..R...73CT8.'{.....,.O...........0.UW..V..S..)5..... ui..!H.<..8...\|.&.4$......!..\..y..........w.1.\.......+l@].?_.C.6.d.C....?t.k.....U.D...g...........v....f.d..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.173332258200589
TrID:	Win32 Executable (generic) a (10002005/4) 99.66% UPX compressed Win32 Executable (30571/9) 0.30% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	y8uLBHoe4J.exe
File size:	8177152
MD5:	d7699afcf044b90a9f22bd4ed2662c88
SHA1:	afe7ad4e2f7b518695635d2b8766ffc2d8ef0df2
SHA256:	d6fa908610cbcfd0de2bfbfadc4ae6f50194e9bccec7ec8a63f7aa4546b72715
SHA512:	4571169f4dbc8822f2c20aa1fa0ba7f0062c928622bff3f354836fa5bd12e71fbb71855046b82d2e58929b58af25b78eecc86c404f051d642955cb9755a55048
SSDEEP:	196608:LIRcbH4jSteTGvlxwhzav1yo31CPwDv3uFZjeg2EeJUO9WLQkDxtw3iFFrS6XOfA:LdHsfulxwZ6v1CPwDv3uFteg2EeJUO9E
File Content Preview:	MZ......................@...................................H...........!..L.!This program cannot be run in DOS mode....$.........e..............h.......h..y....h...... T..............).......).......).......c.......c.......c...............[.......c......

File Icon


Icon Hash:	00828e8e8686b000

Static PE Info

General

Entrypoint:	0x689752
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	32BIT_MACHINE, EXECUTABLE_IMAGE
DLL Characteristics:	TERMINAL_SERVER_AWARE
Time Stamp:	0x60DBD4C4 [Wed Jun 30 02:19:48 2021 UTC]
TLS Callbacks:	0x5ccb40
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	2b817dc1b1849c6a436f0647be7673e0

Entrypoint Preview

Instruction
call 00007F9858D6D736h
jmp 00007F9858D6C2D3h
cmp ecx, dword ptr [0078EBD8h]
jne 00007F9858D6C445h
ret
jmp 00007F9858D6C7BBh
jmp dword ptr [006E03D8h]
mov ecx, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], ecx
pop ecx
pop edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
push ecx
ret
mov ecx, dword ptr [ebp-10h]
xor ecx, ebp
call 00007F9858D6C40Fh
jmp 00007F9858D6C420h
mov ecx, dword ptr [ebp-14h]
xor ecx, ebp
call 00007F9858D6C3FEh
jmp 00007F9858D6C40Fh
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [0078EBD8h]
xor eax, ebp
push eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [0078EBD8h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]

Rich Headers

Programming Language:

[C++] VS2015 UPD3.1 build 24215
[ C ] VS2015 UPD3.1 build 24215

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x38a8d4	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x3a9000	0x409c28	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x7b3000	0x24acc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x34950c	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x32a0d0	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2e0000	0x3d8	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x388b5c	0x280	.rdata
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x2de13d	0x2de200	unknown	unknown	unknown	unknown	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rdata	0x2e0000	0xabf66	0xac000	False	0.410037018532	data	5.38711051006	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x38c000	0x19c1c	0x12200	False	0.13588362069	data	5.01581105731	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
.gfids	0x3a6000	0x11f8	0x1200	False	0.389322916667	data	4.13765319933	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.tls	0x3a8000	0x9	0x200	False	0.033203125	data	0.0203931352361	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
.rsrc	0x3a9000	0x409c28	0x409e00	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x7b3000	0x24acc	0x24c00	False	0.551080197704	data	6.59801573181	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_RCDATA	0x3a91a8	0x1b309a	PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed	English	United States
RT_RCDATA	0x55c244	0x5ba9d	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed	English	United States
RT_RCDATA	0x5b7ce4	0x47810	PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed	English	United States
RT_RCDATA	0x5ff4f4	0x6df45	PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed	English	United States
RT_RCDATA	0x66d43c	0x160dd	PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed	English	United States
RT_RCDATA	0x68351c	0x2f0fd	PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed	English	United States
RT_RCDATA	0x6b261c	0xf3400	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed	English	United States
RT_RCDATA	0x7a5a1c	0xd200	PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed	English	United States

Imports

DLL

Import

KERNEL32.dll

HeapFree, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionEx, HeapSize, PostQueuedCompletionStatus, FormatMessageW, GetLastError, SetEvent, TlsAlloc, HeapReAlloc, CloseHandle, RaiseException, HeapAlloc, DecodePointer, HeapDestroy, LocalFree, DeleteCriticalSection, GetProcessHeap, WideCharToMultiByte, TlsFree, FormatMessageA, CreateEventA, GetCurrentProcess, GetSystemTimes, GetTickCount64, GetProcessTimes, SetWaitableTimer, TlsSetValue, SetLastError, CreateWaitableTimerW, WaitForMultipleObjects, InitializeCriticalSectionAndSpinCount, GetQueuedCompletionStatus, WaitForSingleObject, GetModuleHandleA, CreateEventW, MultiByteToWideChar, TerminateThread, QueueUserAPC, GetProcAddress, VerSetConditionMask, SleepEx, VerifyVersionInfoW, TlsGetValue, GetSystemTimeAsFileTime, CreateIoCompletionPort, CreateDirectoryW, ReadFile, SizeofResource, QueryDosDeviceW, GetVolumeInformationW, FindFirstFileW, WriteProcessMemory, FindFirstFileExW, SetPriorityClass, VirtualFree, GetFullPathNameW, FindNextFileW, lstrlenW, WriteFile, Wow64DisableWow64FsRedirection, GetSystemDefaultUILanguage, GetDiskFreeSpaceW, VirtualAlloc, TerminateProcess, GetDriveTypeA, GetModuleFileNameW, GetUserDefaultLocaleName, GetProcessId, K32GetModuleFileNameExW, GetProductInfo, Thread32Next, GetTempPathW, CreateMutexW, Thread32First, FindClose, GetLocaleInfoW, CreateFileW, GetFileAttributesW, GetCurrentThreadId, GetVersionExW, K32GetProcessImageFileNameW, SuspendThread, GetSystemDirectoryW, ResumeThread, lstrcatA, OpenProcess, SetFileAttributesW, GetLogicalDriveStringsW, CreateToolhelp32Snapshot, Sleep, CopyFileA, Process32NextW, K32GetProcessMemoryInfo, CreateFileA, GetCurrentThread, LoadLibraryA, LockResource, GlobalAlloc, Process32FirstW, GlobalFree, GetNativeSystemInfo, GetSystemInfo, LoadLibraryW, FindResourceExW, LoadResource, FindResourceW, SetFileAttributesA, GetThreadContext, GetPriorityClass, GlobalLock, VirtualAllocEx, MoveFileExW, GetFileSize, ExitProcess, ReadProcessMemory, GetComputerNameW, FindFirstStreamW, GetCurrentProcessId, SystemTimeToFileTime, GlobalMemoryStatusEx, CreateProcessW, GetModuleHandleW, WinExec, CreateRemoteThread, QueryFullProcessImageNameW, CreateProcessA, DebugBreak, SetThreadContext, FindNextStreamW, GetTickCount, GlobalUnlock, GetDriveTypeW, GetFileTime, OpenThread, GetExitCodeProcess, Beep, CreatePipe, PeekNamedPipe, GetStartupInfoA, lstrcpyA, CreateThread, CreateTimerQueueTimer, VirtualProtect, GetCommandLineW, DeviceIoControl, GetEnvironmentVariableW, GetExitCodeThread, FreeLibrary, IsDebuggerPresent, CreateTimerQueue, EncodePointer, TryEnterCriticalSection, DuplicateHandle, WaitForSingleObjectEx, QueryPerformanceCounter, QueryPerformanceFrequency, GetFileAttributesExW, GetFileInformationByHandle, SetEndOfFile, SetFilePointerEx, AreFileApisANSI, GetStringTypeW, GetCPInfo, CompareStringW, LCMapStringW, OutputDebugStringW, InitializeCriticalSection, GetSystemDirectoryA, VerifyVersionInfoA, ExpandEnvironmentStringsA, GetStdHandle, GetFileType, ResetEvent, ReleaseSemaphore, OpenEventA, GetLogicalProcessorInformation, GetCurrentDirectoryW, DeleteFileW, RemoveDirectoryW, CreateDirectoryExW, GetFileSizeEx, SwitchToFiber, DeleteFiber, CreateFiber, ConvertFiberToThread, ConvertThreadToFiber, GetConsoleMode, SetConsoleMode, ReadConsoleA, ReadConsoleW, GetSystemTime, InitializeSListHead, InterlockedPopEntrySList, InterlockedPushEntrySList, InterlockedFlushSList, QueryDepthSList, UnregisterWaitEx, RegisterWaitForSingleObject, GetThreadTimes, FreeLibraryAndExitThread, LoadLibraryExW, SignalObjectAndWait, SwitchToThread, SetThreadPriority, GetThreadPriority, ChangeTimerQueueTimer, DeleteTimerQueueTimer, GetNumaHighestNodeNumber, GetProcessAffinityMask, SetThreadAffinityMask, UnregisterWait, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsProcessorFeaturePresent, GetStartupInfoW, RtlUnwind, SetConsoleCtrlHandler, ExitThread, GetModuleHandleExW, SystemTimeToTzSpecificLocalTime, FileTimeToSystemTime, GetModuleFileNameA, WriteConsoleW, SetEnvironmentVariableA, GetACP, GetConsoleCP, GetDateFormatW, GetTimeFormatW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, FlushFileBuffers, SetStdHandle, GetTimeZoneInformation, FindFirstFileExA, FindNextFileA, IsValidCodePage, GetOEMCP, GetCommandLineA, GetEnvironmentStringsW, FreeEnvironmentStringsW, VirtualQuery, LoadLibraryExA

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 31, 2022 10:02:15.261868954 CET	49745	443	192.168.2.3	37.252.187.111
Jan 31, 2022 10:02:15.261909962 CET	443	49745	37.252.187.111	192.168.2.3
Jan 31, 2022 10:02:15.262020111 CET	49745	443	192.168.2.3	37.252.187.111
Jan 31, 2022 10:02:15.291666985 CET	49745	443	192.168.2.3	37.252.187.111
Jan 31, 2022 10:02:15.291697979 CET	443	49745	37.252.187.111	192.168.2.3
Jan 31, 2022 10:02:15.413978100 CET	443	49745	37.252.187.111	192.168.2.3
Jan 31, 2022 10:02:15.414084911 CET	49745	443	192.168.2.3	37.252.187.111
Jan 31, 2022 10:02:15.417608976 CET	49745	443	192.168.2.3	37.252.187.111
Jan 31, 2022 10:02:15.417624950 CET	443	49745	37.252.187.111	192.168.2.3
Jan 31, 2022 10:02:15.417819977 CET	443	49745	37.252.187.111	192.168.2.3
Jan 31, 2022 10:02:15.417972088 CET	49745	443	192.168.2.3	37.252.187.111
Jan 31, 2022 10:02:15.417993069 CET	443	49745	37.252.187.111	192.168.2.3
Jan 31, 2022 10:02:15.459481001 CET	49745	443	192.168.2.3	37.252.187.111
Jan 31, 2022 10:02:16.258009911 CET	49746	443	192.168.2.3	85.230.178.139
Jan 31, 2022 10:02:16.258052111 CET	443	49746	85.230.178.139	192.168.2.3
Jan 31, 2022 10:02:16.258167028 CET	49746	443	192.168.2.3	85.230.178.139
Jan 31, 2022 10:02:16.259202957 CET	49746	443	192.168.2.3	85.230.178.139
Jan 31, 2022 10:02:16.259221077 CET	443	49746	85.230.178.139	192.168.2.3
Jan 31, 2022 10:02:16.295995951 CET	443	49746	85.230.178.139	192.168.2.3
Jan 31, 2022 10:02:18.329603910 CET	49747	9001	192.168.2.3	149.56.141.138
Jan 31, 2022 10:02:18.432081938 CET	9001	49747	149.56.141.138	192.168.2.3
Jan 31, 2022 10:02:18.944152117 CET	49747	9001	192.168.2.3	149.56.141.138
Jan 31, 2022 10:02:19.046075106 CET	9001	49747	149.56.141.138	192.168.2.3
Jan 31, 2022 10:02:19.553602934 CET	49747	9001	192.168.2.3	149.56.141.138
Jan 31, 2022 10:02:19.655500889 CET	9001	49747	149.56.141.138	192.168.2.3
Jan 31, 2022 10:02:21.773966074 CET	49749	443	192.168.2.3	154.35.175.225
Jan 31, 2022 10:02:21.774019003 CET	443	49749	154.35.175.225	192.168.2.3
Jan 31, 2022 10:02:21.774132013 CET	49749	443	192.168.2.3	154.35.175.225
Jan 31, 2022 10:02:21.775238991 CET	49749	443	192.168.2.3	154.35.175.225
Jan 31, 2022 10:02:21.775263071 CET	443	49749	154.35.175.225	192.168.2.3
Jan 31, 2022 10:02:22.267184973 CET	443	49749	154.35.175.225	192.168.2.3
Jan 31, 2022 10:02:22.267404079 CET	49749	443	192.168.2.3	154.35.175.225
Jan 31, 2022 10:02:22.270613909 CET	49749	443	192.168.2.3	154.35.175.225
Jan 31, 2022 10:02:22.270628929 CET	443	49749	154.35.175.225	192.168.2.3
Jan 31, 2022 10:02:22.270721912 CET	443	49749	154.35.175.225	192.168.2.3
Jan 31, 2022 10:02:22.392837048 CET	49749	443	192.168.2.3	154.35.175.225
Jan 31, 2022 10:02:22.392872095 CET	443	49749	154.35.175.225	192.168.2.3
Jan 31, 2022 10:02:22.431622028 CET	49749	443	192.168.2.3	154.35.175.225
Jan 31, 2022 10:02:22.473872900 CET	443	49749	154.35.175.225	192.168.2.3
Jan 31, 2022 10:02:22.852425098 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:22.952840090 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:22.952953100 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:22.953926086 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.056745052 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.163243055 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.263612986 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.264777899 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.565368891 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.565490961 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.670622110 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.670634985 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.670869112 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.700594902 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.802633047 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.850827932 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.852109909 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.956057072 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956079960 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956093073 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956106901 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956120968 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956137896 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956151009 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956202984 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956216097 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956233025 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956252098 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.956269026 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.956270933 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.956288099 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.956309080 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956322908 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956338882 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956351042 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956368923 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:23.956383944 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:23.956398964 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.056493044 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056509018 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056528091 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056552887 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056566954 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056586027 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056602001 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056617975 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056632042 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056649923 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056652069 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.056657076 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056668997 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056683064 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056699991 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056706905 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.056713104 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056726933 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056739092 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.056744099 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056756973 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.056771040 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.056797028 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.057145119 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.057176113 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.057256937 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.136715889 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.156914949 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.156936884 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.156949043 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.156961918 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.156974077 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157047987 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.157053947 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157068014 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157100916 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.157104015 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157118082 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157131910 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157145977 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.157151937 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157166004 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157177925 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.157182932 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157196045 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157212019 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157213926 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.157224894 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157246113 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.157269001 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157279015 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.157283068 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157295942 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157310963 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157324076 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.157327890 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157342911 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157358885 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157366991 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.157372952 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157393932 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.157418966 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.157445908 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157459974 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157475948 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.157505989 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258299112 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258316040 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258336067 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258349895 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258364916 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258382082 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258394003 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258410931 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258410931 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258424044 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258441925 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258454084 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258455992 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258466005 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258482933 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258482933 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258495092 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258507967 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258508921 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258522034 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258529902 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258533955 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258547068 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258558989 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258559942 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258570910 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258584023 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258596897 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258599997 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258613110 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258620024 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258630037 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258644104 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258656979 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258661032 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258673906 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258687019 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258692026 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258704901 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258708000 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258718014 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258730888 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258744001 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258748055 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258755922 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258769035 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258780956 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258790016 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258797884 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258810043 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258822918 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258826971 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258840084 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.258846998 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.258881092 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359293938 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359309912 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359330893 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359344959 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359358072 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359369993 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359386921 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359400988 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359419107 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359431982 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359432936 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359472036 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359508991 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359514952 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359529018 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359545946 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359559059 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359571934 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359584093 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359587908 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359601974 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359620094 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359623909 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359633923 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359646082 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359661102 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359673977 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359682083 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359692097 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359705925 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359708071 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359718084 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359735012 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359743118 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359747887 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359761000 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359771013 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359776974 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359790087 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359798908 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359807014 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359819889 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359833002 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359843969 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359850883 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359863997 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359879017 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359893084 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359895945 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359905958 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359919071 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359931946 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359947920 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359950066 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359961033 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359973907 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.359989882 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.359991074 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.360004902 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.360018015 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.360032082 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.360044003 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.360047102 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.360071898 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.360110044 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.415283918 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.415560961 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.459711075 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.459728003 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.459747076 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.459759951 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.459871054 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.460155010 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460169077 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460186005 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460199118 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460232019 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460345030 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.460366011 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.460392952 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460427999 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460443974 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460457087 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460469961 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460480928 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.460486889 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460500956 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460516930 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460530043 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460546017 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460558891 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460565090 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.460571051 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460585117 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460601091 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.460609913 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.460633993 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.471739054 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.471972942 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.491797924 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.515542030 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.515564919 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.515577078 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.515856028 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.515896082 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.515911102 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.515928984 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.515942097 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.515954971 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.515968084 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.515980959 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.515994072 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.515995026 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.516006947 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.516020060 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.516038895 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.516071081 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.517314911 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.517328978 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.517347097 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.517360926 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.517378092 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.517390013 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.517409086 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.517422915 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.517422915 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.517450094 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.517465115 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.517503977 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.520401001 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.520414114 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.520431042 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.520517111 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.520554066 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.571966887 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.571984053 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572005987 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572019100 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572113991 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.572154045 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572160959 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.572206974 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572223902 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572237015 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572249889 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572268009 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572268963 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.572282076 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572293997 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572309971 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572314978 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.572324038 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572352886 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.572367907 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.572379112 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572393894 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572411060 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572424889 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572439909 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572448015 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.572453976 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572468042 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.572473049 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.572516918 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.574279070 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.574299097 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.574378014 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.592344046 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.593751907 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.616235018 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616256952 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616270065 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616281986 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616295099 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616307020 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616318941 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616341114 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616343975 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616358042 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616370916 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616388083 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616391897 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.616400957 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616414070 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616441011 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616460085 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616472960 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616489887 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616503954 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.616503954 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616544962 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616548061 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.616559029 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616574049 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616586924 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616599083 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616624117 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.616652012 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616652966 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.616666079 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616693974 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616707087 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616708040 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.616730928 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616744041 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616758108 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.616780996 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.616781950 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616796970 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616816998 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616830111 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616847038 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.616846085 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.616892099 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.616916895 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.617731094 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.617744923 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.617763042 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.617793083 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.617806911 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.617821932 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.617871046 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.617954016 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.617966890 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.617993116 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.618006945 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.618020058 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.618033886 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.618040085 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.618057966 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.618062973 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.618108988 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.620714903 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.620728016 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.620748043 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.620762110 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.620811939 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.620837927 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.672405958 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672429085 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672441959 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672477961 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672497988 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672514915 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672532082 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672548056 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672557116 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.672564983 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672581911 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672591925 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.672597885 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672616005 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672626019 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.672632933 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672650099 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672661066 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.672667980 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672688007 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672703028 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672704935 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.672739983 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.672750950 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672766924 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672782898 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672784090 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.672805071 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.672817945 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.672868013 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.674523115 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.674556017 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.674675941 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.694042921 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716799974 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716820955 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716834068 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716850042 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716866970 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716886997 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716886044 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.716905117 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716922998 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716929913 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.716942072 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716960907 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716979027 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.716993093 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.716996908 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717009068 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717027903 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717037916 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.717046976 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717062950 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.717065096 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717083931 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717092037 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.717101097 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717119932 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717138052 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717144966 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.717156887 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717175961 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717181921 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.717191935 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717205048 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717216969 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717228889 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.717236042 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717253923 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717272997 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717293024 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717310905 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717322111 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.717323065 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717341900 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717358112 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717371941 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717381954 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.717391014 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.717437983 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.718058109 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718096972 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718116045 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718127966 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718141079 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718156099 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.718199015 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.718250990 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718270063 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718287945 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718310118 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718327999 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718333006 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.718341112 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718358994 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.718365908 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.718425035 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.721045017 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.721064091 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.721080065 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.721097946 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.721191883 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.738195896 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.738514900 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.739953041 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.750077963 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773025990 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773049116 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773067951 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773081064 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773098946 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773098946 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773116112 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773133993 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773152113 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773161888 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773168087 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773185015 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773201942 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773207903 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773221016 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773232937 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773236990 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773255110 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773272991 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773277044 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773289919 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773308039 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773313999 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773324013 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773334026 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773343086 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773360968 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773370028 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773379087 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773396969 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773406982 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773415089 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773431063 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773436069 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773449898 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773459911 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773467064 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773484945 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773494959 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773502111 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773519993 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773533106 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773538113 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773555040 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773560047 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773574114 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773583889 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773591995 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773608923 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773627043 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.773627996 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.773667097 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.774826050 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.774847031 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.774883986 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.774931908 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.774962902 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.817720890 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817744017 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817761898 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817778111 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817795038 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817811966 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817831039 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817856073 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817872047 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.817878008 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817894936 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817913055 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817923069 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.817929983 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817948103 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817954063 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.817964077 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817981958 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.817985058 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818000078 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818017006 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818021059 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818034887 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818053961 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818065882 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818070889 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818089962 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818101883 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818105936 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818123102 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818133116 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818140984 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818157911 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818161011 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818173885 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818190098 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818192005 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818209887 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818228006 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818234921 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818243980 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818262100 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818275928 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818280935 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818299055 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818303108 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818316936 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818334103 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818336964 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818377018 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818377972 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818407059 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818418026 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818424940 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818443060 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818454981 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818484068 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818489075 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818531990 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.818537951 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.818578005 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.841681004 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841702938 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841716051 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841733932 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841753006 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841774940 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841780901 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841799021 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841816902 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841834068 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841865063 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841878891 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841896057 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841917038 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841936111 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841948032 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841964960 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841979027 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.841995955 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.842010021 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.842015028 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.842096090 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.850305080 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.850342989 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.850406885 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.851907015 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.851927996 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.851943970 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.851962090 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.851980925 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.851994991 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.851999044 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.852016926 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.852041006 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.852061987 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.852093935 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.873826981 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.873855114 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.873970032 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.873991013 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874005079 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874006987 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874046087 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874049902 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874070883 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874089956 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874092102 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874105930 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874125004 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874135017 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874152899 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874157906 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874180079 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874191999 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874245882 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874248981 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874264956 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874283075 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874290943 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874301910 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874320030 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874334097 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874357939 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874375105 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874382973 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874387980 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874418020 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874432087 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874449015 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874453068 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874465942 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874484062 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874496937 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874501944 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874517918 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874527931 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874536991 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874550104 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874562979 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874574900 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874593973 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874603033 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874613047 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874650002 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874651909 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874671936 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874677896 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874696970 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874723911 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874732018 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874742031 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874759912 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874773979 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874778032 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874795914 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874804974 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874813080 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874835014 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874846935 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874851942 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874880075 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874896049 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874943972 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874960899 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.874964952 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874969959 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.874988079 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.875017881 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.875061989 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.875077963 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.875097036 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.875150919 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.875215054 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.875271082 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.875288963 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.875305891 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.875333071 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.875379086 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.919019938 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:24.937634945 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.937916040 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:24.938605070 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:25.235030890 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.410837889 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:26.410893917 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:26.511152029 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.511178017 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.511184931 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.511193991 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.511240959 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.511349916 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512653112 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512680054 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512700081 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512715101 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512727976 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512742043 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512759924 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512772083 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512784958 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512784004 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:26.512798071 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512810946 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.512814045 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:26.512862921 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:26.613111973 CET	9001	49750	66.111.2.16	192.168.2.3
Jan 31, 2022 10:02:26.663578033 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:02:29.286631107 CET	49753	443	192.168.2.3	185.225.68.133
Jan 31, 2022 10:02:29.286676884 CET	443	49753	185.225.68.133	192.168.2.3
Jan 31, 2022 10:02:29.286751032 CET	49753	443	192.168.2.3	185.225.68.133
Jan 31, 2022 10:02:29.287497997 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.288196087 CET	49755	443	192.168.2.3	95.216.19.206
Jan 31, 2022 10:02:29.288225889 CET	443	49755	95.216.19.206	192.168.2.3
Jan 31, 2022 10:02:29.289926052 CET	49753	443	192.168.2.3	185.225.68.133
Jan 31, 2022 10:02:29.289964914 CET	443	49753	185.225.68.133	192.168.2.3
Jan 31, 2022 10:02:29.289979935 CET	49755	443	192.168.2.3	95.216.19.206
Jan 31, 2022 10:02:29.290663004 CET	49755	443	192.168.2.3	95.216.19.206
Jan 31, 2022 10:02:29.290678024 CET	443	49755	95.216.19.206	192.168.2.3
Jan 31, 2022 10:02:29.311031103 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.311134100 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.311789036 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.335261106 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.336997986 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.338679075 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.362495899 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.362601995 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.386140108 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.387871027 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.387964010 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.407603979 CET	443	49753	185.225.68.133	192.168.2.3
Jan 31, 2022 10:02:29.407733917 CET	49753	443	192.168.2.3	185.225.68.133
Jan 31, 2022 10:02:29.410134077 CET	49753	443	192.168.2.3	185.225.68.133
Jan 31, 2022 10:02:29.410156965 CET	443	49753	185.225.68.133	192.168.2.3
Jan 31, 2022 10:02:29.410305977 CET	443	49753	185.225.68.133	192.168.2.3
Jan 31, 2022 10:02:29.410737038 CET	49753	443	192.168.2.3	185.225.68.133
Jan 31, 2022 10:02:29.410763025 CET	443	49753	185.225.68.133	192.168.2.3
Jan 31, 2022 10:02:29.411463976 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.413588047 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.437345028 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.438123941 CET	443	49755	95.216.19.206	192.168.2.3
Jan 31, 2022 10:02:29.438215017 CET	49755	443	192.168.2.3	95.216.19.206
Jan 31, 2022 10:02:29.441246986 CET	49755	443	192.168.2.3	95.216.19.206
Jan 31, 2022 10:02:29.441257954 CET	443	49755	95.216.19.206	192.168.2.3
Jan 31, 2022 10:02:29.442578077 CET	49755	443	192.168.2.3	95.216.19.206
Jan 31, 2022 10:02:29.442578077 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.442595959 CET	443	49755	95.216.19.206	192.168.2.3
Jan 31, 2022 10:02:29.442610025 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.442620993 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.442626953 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.442734957 CET	443	49755	95.216.19.206	192.168.2.3
Jan 31, 2022 10:02:29.460691929 CET	49753	443	192.168.2.3	185.225.68.133
Jan 31, 2022 10:02:29.466790915 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.467720985 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.467782021 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.467852116 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.491233110 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.491317987 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.491485119 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.491502047 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.491689920 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.491807938 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.499552965 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.499584913 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.499602079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.499619961 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.499638081 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.499656916 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.499675035 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.499671936 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.499691963 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.499696970 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.499708891 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.499732971 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.499749899 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.515500069 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.515528917 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.515744925 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.515917063 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.520020008 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523035049 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523053885 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523066998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523080111 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523108006 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523129940 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523147106 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523166895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523183107 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.523184061 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523204088 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523206949 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.523221970 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.523237944 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.523407936 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.525423050 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.525444031 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.525456905 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.525475025 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.525492907 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.525510073 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.525562048 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.525577068 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.525614023 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.525662899 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.539258003 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.539282084 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.539294004 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.539307117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.539315939 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.539340973 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.539403915 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.539499998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.539530993 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.546634912 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546654940 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546670914 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546684980 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546701908 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546719074 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546732903 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.546737909 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546756029 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546772957 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546789885 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546791077 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.546849966 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.546879053 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546897888 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546914101 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546931028 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.546933889 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.546968937 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.547019005 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.547139883 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.547163963 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.547177076 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.547194004 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.547207117 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.547230959 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.547269106 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.547297955 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.547373056 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.547390938 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.547408104 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.547435045 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.547467947 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.548969030 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.548990011 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.549007893 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.549026012 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.549041986 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.549060106 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.549077988 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.549093962 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.549166918 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.549185991 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.549192905 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.566596985 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566618919 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566634893 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566652060 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566668987 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566685915 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566704035 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566708088 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.566720009 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566739082 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566751957 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.566755056 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566771984 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566777945 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.566787958 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566801071 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.566806078 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566823006 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.566833973 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.566870928 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.570154905 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570175886 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570188999 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570202112 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570219994 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570235968 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570251942 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570254087 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.570269108 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570285082 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570286989 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.570302010 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570313931 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.570318937 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570336103 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570352077 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570363998 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.570369959 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570389032 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570404053 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.570406914 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570424080 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.570425987 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570442915 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570461988 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.570483923 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.570833921 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570852995 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570871115 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570889950 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570904970 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.570905924 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570924997 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.570936918 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.570970058 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.575985909 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.576005936 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.576016903 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.576029062 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.576046944 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.576065063 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.576098919 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.576117992 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.576132059 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.576136112 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.576159954 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.576168060 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.576221943 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.590238094 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.590262890 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.590279102 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.590296030 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.590312958 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.590329885 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.590329885 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.590348005 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.590364933 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.590383053 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.590418100 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.593832016 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.593878984 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.593897104 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.593913078 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.593930960 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.593947887 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.593964100 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.593966007 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.593983889 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594002962 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594021082 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594027996 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.594038963 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594055891 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594074011 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594090939 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594101906 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.594108105 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594124079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594141960 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594147921 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.594158888 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594176054 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594182968 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.594192982 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594212055 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594214916 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.594228983 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594245911 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594245911 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.594263077 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.594291925 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.594327927 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.599498034 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599520922 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599538088 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599555969 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599572897 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599601984 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599618912 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599630117 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.599634886 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599653959 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599673033 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599678040 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.599690914 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599709034 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599720955 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.599725008 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599742889 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599761009 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599777937 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.599821091 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.599824905 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.599827051 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.601320982 CET	49755	443	192.168.2.3	95.216.19.206
Jan 31, 2022 10:02:29.601339102 CET	443	49755	95.216.19.206	192.168.2.3
Jan 31, 2022 10:02:29.613821983 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.613867998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.613889933 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.613970041 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.617263079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617305994 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617332935 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617357969 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617381096 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617403984 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617661953 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617692947 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617717028 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617747068 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617773056 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617794991 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617818117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617842913 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617887974 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617913961 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617935896 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617959976 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617981911 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.617990971 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618002892 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.618012905 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618016005 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618019104 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618021965 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618026018 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618026018 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.618029118 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618031025 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618032932 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618035078 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618036985 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618038893 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618041992 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618045092 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618047953 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618050098 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.618051052 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618053913 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618072987 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618073940 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.618096113 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618097067 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.618118048 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618119955 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.618138075 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618141890 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.618160009 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618164062 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.618180990 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.618184090 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618200064 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.618206978 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618216991 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.618225098 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618246078 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.618266106 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.624691010 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624728918 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624753952 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624778986 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624816895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624821901 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624846935 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624864101 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.624875069 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624900103 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624922037 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624923944 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.624944925 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624964952 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.624970913 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624995947 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.624996901 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.625021935 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.625047922 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.625050068 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.625072002 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.625086069 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.625096083 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.625119925 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.625121117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.625145912 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.625163078 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.625170946 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.625195980 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.625204086 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.625238895 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.635009050 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.637480021 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.637516975 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.637638092 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.641730070 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.641768932 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.641788006 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.641813040 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.641839027 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.641870022 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.641884089 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.641906023 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.641928911 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.641932011 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.641951084 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.641951084 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.641972065 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.641976118 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.641993999 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642016888 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.642018080 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642040014 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642057896 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642086029 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.642086983 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642116070 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642121077 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.642138004 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642160892 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642164946 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.642184019 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642206907 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642229080 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642250061 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642270088 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642283916 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.642288923 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.642291069 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642291069 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.642312050 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642314911 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.642328978 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.642338991 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.642436981 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.648654938 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648682117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648709059 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648735046 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648758888 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648761988 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.648785114 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648787975 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.648808002 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.648809910 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648833990 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648844957 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.648858070 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.648859024 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648876905 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.648884058 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648897886 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.648909092 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648919106 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.648933887 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648950100 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.648957968 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648983002 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.648983002 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.648992062 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649007082 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649015903 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649030924 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649055004 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649072886 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649080992 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649106026 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649106026 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649132013 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649133921 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649154902 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649154902 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649179935 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649179935 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649203062 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649204016 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649219036 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649228096 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649240017 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649252892 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649265051 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649276972 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649291992 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649302006 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.649312973 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.649343014 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.658615112 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.658744097 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661237001 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661276102 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661299944 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661324978 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661350012 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661371946 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661374092 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661398888 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661408901 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661422968 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661436081 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661448956 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661475897 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661489964 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661499977 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661525965 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661528111 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661550045 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661556005 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661576033 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661593914 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661601067 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661626101 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661647081 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661649942 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661675930 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661684036 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661700010 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661725044 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661727905 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661748886 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661752939 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661772966 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661793947 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661798000 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661822081 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661829948 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661847115 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661871910 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661887884 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661914110 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661916018 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661937952 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661962032 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.661962986 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661988020 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.661993027 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662012100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662036896 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662038088 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662061930 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662076950 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662086010 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662107944 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662111044 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662147045 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662172079 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662206888 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662290096 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662313938 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662341118 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662345886 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662389994 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662395000 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662420988 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662450075 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662486076 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662494898 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662520885 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662559986 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662575960 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662600994 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662631989 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662683964 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662695885 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662719965 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662744999 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662767887 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662770033 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662796021 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662817001 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662822008 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662842035 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662846088 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662870884 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662879944 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662894964 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662909985 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662919998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662944078 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.662945986 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.662987947 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.663366079 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.665832996 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.665884018 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.665909052 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.665935040 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.665951014 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.665958881 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.665983915 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.665994883 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666008949 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666026115 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666033030 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666047096 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666059017 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666083097 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666085958 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666105986 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666110039 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666130066 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666131020 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666152000 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666153908 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666174889 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666177988 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666193962 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666203022 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666225910 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666229963 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666249990 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666254997 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666275024 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666290045 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666300058 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.666318893 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.666346073 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.668796062 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.672836065 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.672872066 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.672899008 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.672924042 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.672949076 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.672956944 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.672974110 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.672977924 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.672988892 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.672998905 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673022985 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673031092 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673048019 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673049927 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673072100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673074961 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673093081 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673096895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673113108 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673121929 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673139095 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673146009 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673160076 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673168898 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673191071 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673193932 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673217058 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673218966 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673234940 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673243046 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673257113 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673274040 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673295975 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673300982 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673314095 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673326969 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673340082 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673351049 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673372984 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673376083 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673386097 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673401117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673419952 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673424959 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673437119 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673449993 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673460007 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673475981 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673501015 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673501968 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673527002 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673533916 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673551083 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673552990 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673573017 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673576117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673595905 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673600912 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673616886 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673624992 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673650026 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673650026 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673666000 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673676968 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673690081 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673702002 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673712015 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673727989 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673743963 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.673752069 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.673768997 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.677417040 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.685633898 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685671091 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685697079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685722113 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685746908 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685771942 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685780048 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.685796022 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685820103 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685830116 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.685841084 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685868025 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.685887098 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.685887098 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685914040 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685937881 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685957909 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.685962915 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.685977936 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.685987949 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686013937 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686016083 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686038017 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686038971 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686053991 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686064959 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686074972 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686089039 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686098099 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686114073 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686127901 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686137915 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686152935 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686162949 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686173916 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686187983 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686203957 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686213017 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686237097 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686237097 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686260939 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686260939 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686285019 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686294079 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686310053 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686327934 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686333895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686357021 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686358929 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686379910 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686383963 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686404943 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686408043 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686424017 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686444044 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686479092 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686503887 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686521053 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686528921 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686542988 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686553001 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686563015 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686578035 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686589003 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.686602116 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.686610937 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.688622952 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.690344095 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690382004 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690407991 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690433025 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690433979 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.690454006 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.690458059 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690481901 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.690484047 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690509081 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690511942 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.690532923 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690534115 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.690557957 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690561056 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.690582037 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690583944 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.690608025 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690618992 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.690630913 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690639973 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.690655947 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.690670013 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.690696001 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.692301989 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.692410946 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.700999022 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.701157093 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.705197096 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705229998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705255032 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705276966 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.705281019 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705295086 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.705305099 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705329895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705353022 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.705353022 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705368996 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.705378056 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705400944 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.705403090 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705423117 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.705425978 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705439091 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.705450058 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705462933 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.705476999 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.705483913 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.705514908 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.708309889 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708347082 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708370924 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708396912 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708405972 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.708421946 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708424091 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.708445072 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708467007 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.708471060 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708489895 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.708494902 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708519936 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708523989 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.708545923 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708553076 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.708569050 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708574057 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.708595037 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.708596945 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.708620071 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.708641052 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.712084055 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712115049 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712140083 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712165117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712183952 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.712189913 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712214947 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712225914 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.712239981 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712246895 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.712265015 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712285995 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.712291002 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712315083 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.712316036 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712341070 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712353945 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.712364912 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712389946 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.712392092 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.712423086 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.712461948 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.716715097 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.724612951 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.724749088 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.725042105 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.725450993 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725482941 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725509882 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725536108 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725553989 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.725559950 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725586891 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725613117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725615025 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.725636005 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.725636959 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725661993 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725663900 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.725686073 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.725686073 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725708961 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.725711107 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725724936 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.725738049 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.725745916 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.725780010 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.727763891 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.727802992 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.727843046 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.727859020 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.727864027 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.727885008 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.727900028 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.727910042 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.727921963 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.727935076 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.727948904 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.727957964 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.727977991 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.727998018 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.728022099 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.728048086 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.728070974 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.728142023 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.728149891 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.730973959 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731008053 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731031895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731056929 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731070995 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.731081963 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731107950 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731117010 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.731137991 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.731137991 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731163979 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731168032 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.731187105 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.731189966 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731210947 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.731213093 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731229067 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.731236935 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731261969 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.731266022 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.731272936 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.731302023 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.731318951 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.732283115 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.746934891 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.746973991 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.747000933 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.747025013 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.747050047 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.747055054 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.747075081 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.747078896 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.747101068 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.747101068 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.747127056 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.747128963 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.747144938 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.747154951 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.747167110 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.747180939 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.747205973 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.747206926 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.747231960 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.747241020 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.747256994 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.747273922 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.748159885 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.748250961 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.749465942 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749504089 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749528885 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749556065 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749572039 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.749576092 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749602079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749627113 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749628067 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.749649048 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.749650955 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749675035 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749677896 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.749697924 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.749700069 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749720097 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.749725103 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749737024 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.749748945 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.749759912 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.749797106 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.752859116 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.752895117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.752919912 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.752943993 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.752969027 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.752994061 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.753017902 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.753032923 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.753041983 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.753067970 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.753078938 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.753093958 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.753110886 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.753118038 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.753143072 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.753144026 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.753184080 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.757560015 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757596016 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757622004 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757647991 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757664919 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.757673025 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757688046 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.757699966 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757724047 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.757725954 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757745981 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.757752895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757776976 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.757778883 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757796049 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.757805109 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757823944 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.757833004 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757844925 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.757875919 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757879972 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.757900953 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.757921934 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.757942915 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.770622969 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770658970 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770684004 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770709991 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770715952 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.770735025 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770740986 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.770759106 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770783901 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770792007 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.770808935 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770816088 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.770833015 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770858049 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.770858049 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770883083 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770908117 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.770908117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.770934105 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.770968914 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.771691084 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.771761894 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.774888039 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.774929047 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.774949074 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.774975061 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.775001049 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.775007963 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.775023937 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.775059938 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.775060892 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.775068998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.775078058 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.775089979 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.775115013 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.775115967 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.775140047 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.775154114 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.775166035 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.775187969 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.775219917 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.779529095 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779561996 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779587984 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779612064 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779614925 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.779635906 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779642105 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.779659986 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779674053 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.779684067 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779700994 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.779710054 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779731989 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.779733896 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779747963 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.779759884 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779777050 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.779783010 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779804945 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.779807091 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.779834986 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.779864073 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.782052994 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.782171011 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.784491062 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784518957 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784544945 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784569025 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784584045 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.784594059 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784610033 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.784625053 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784636974 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.784637928 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784662962 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784687042 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784693956 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.784710884 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784734964 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784743071 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.784758091 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784781933 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.784785032 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.784805059 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.784897089 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.787765980 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.787791967 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.787817001 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.787841082 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.787842989 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.787868023 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.787892103 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.787893057 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.787918091 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.787924051 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.787936926 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.787961006 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.787962914 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.787981987 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.788001060 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.788038015 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.788062096 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.788079023 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.788086891 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.788108110 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.788110971 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.788124084 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.788151979 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.788822889 CET	49755	443	192.168.2.3	95.216.19.206
Jan 31, 2022 10:02:29.792243004 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792282104 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792308092 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792320967 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.792332888 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792340994 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.792356968 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.792356968 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792371988 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.792382002 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792397022 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.792407036 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792417049 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.792431116 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792460918 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.792462111 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792489052 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792494059 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.792514086 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792517900 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.792537928 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.792550087 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.792581081 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.795414925 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.795495987 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.796875000 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.796910048 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.796937943 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.796945095 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.796962023 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.796976089 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.796987057 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.797010899 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.797013044 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.797038078 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.797039986 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.797063112 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.797065973 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.797082901 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.797086000 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.797106981 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.797113895 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.797130108 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.797132969 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.797148943 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.797154903 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.797172070 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.797194004 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.800307989 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800345898 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800364971 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800384998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800410986 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800437927 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800445080 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.800462961 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800494909 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.800504923 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800514936 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.800530910 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800554037 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.800555944 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800578117 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.800580025 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800601959 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.800604105 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.800626040 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.800647974 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.807544947 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.807625055 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.810695887 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810724974 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810748100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810771942 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810791016 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.810796022 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810822010 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810847044 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.810847044 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810870886 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810879946 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.810897112 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810923100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810925007 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.810945988 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810951948 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.810972929 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810995102 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.810997009 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.811064005 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.813261032 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813287973 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813313007 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813338041 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813361883 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813361883 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.813386917 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813397884 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.813410997 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813425064 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.813436985 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813451052 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.813484907 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813493013 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.813509941 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813536882 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813539028 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.813560963 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.813577890 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.813613892 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.817313910 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817342997 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817367077 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817394018 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817409992 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.817418098 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817428112 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.817442894 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817466974 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817476988 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.817492008 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817501068 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.817517996 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817543983 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817558050 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.817568064 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817593098 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.817600965 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.817625999 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.817662001 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.818943977 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.819026947 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.819793940 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.819818020 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.819844007 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.819869041 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.819880962 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.819895029 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.819921017 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.819928885 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.819945097 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.819951057 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.819969893 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.819998980 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.820024014 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.820033073 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.820050001 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.820075989 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.820076942 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.820103884 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.820144892 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.825135946 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825185061 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825213909 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825238943 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825261116 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.825263977 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825289011 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825314045 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825316906 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.825339079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825340033 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.825361967 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825386047 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.825387001 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825412035 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825426102 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.825438023 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.825450897 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.825489044 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.826612949 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826637983 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826663017 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826687098 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826700926 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.826711893 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826736927 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826755047 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.826761007 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826786041 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826795101 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.826811075 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826821089 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.826836109 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826847076 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.826860905 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826884985 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.826885939 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826909065 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.826910973 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.826936007 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.826962948 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839404106 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839440107 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839468002 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839494944 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839519978 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839536905 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839545012 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839560032 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839570045 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839600086 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839607954 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839624882 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839643955 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839648962 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839670897 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839673996 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839699030 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839700937 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839721918 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839741945 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839745998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839771032 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839778900 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839795113 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839819908 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839823008 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839844942 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839858055 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839870930 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839894056 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839898109 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839922905 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839931965 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839951992 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.839952946 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.839977026 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.840001106 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.840024948 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.840029001 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.840051889 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.840084076 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.841562033 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841588974 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841614008 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841639042 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841655970 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.841662884 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841694117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841716051 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841725111 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.841742039 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841766119 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841778040 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.841789961 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.841789961 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841814995 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841828108 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.841840029 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841860056 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.841880083 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.841892004 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.841927052 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.842500925 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.842606068 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.843214035 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843241930 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843267918 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843292952 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843317986 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843318939 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.843336105 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.843343019 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843368053 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843383074 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.843393087 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843415976 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843420982 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.843440056 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843456984 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.843463898 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843488932 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.843489885 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.843523979 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.843550920 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.844506979 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844541073 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844568968 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844594955 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844619989 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844624996 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.844641924 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.844645023 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844670057 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844691992 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.844692945 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844717026 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844717979 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.844741106 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844749928 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.844780922 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844782114 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.844790936 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.844794989 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.845232010 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.850374937 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.850562096 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.853936911 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.853971004 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.853996038 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.854021072 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.854046106 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.854069948 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.854095936 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.854120970 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.854145050 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.854167938 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.854191065 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.854216099 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.854238987 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855053902 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855098963 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855119944 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855123043 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855125904 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855129957 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855149031 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855437994 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855467081 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855494022 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855519056 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855524063 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855544090 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855547905 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855567932 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855573893 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855592012 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855624914 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855650902 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855667114 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855674028 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855700016 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855715036 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855736017 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855739117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855765104 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855788946 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.855793953 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.855848074 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.858287096 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858319998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858345032 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858371019 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858395100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858408928 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.858419895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858444929 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858454943 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.858515978 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858522892 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.858529091 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.858541965 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858568907 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858582973 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.858587027 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.858592033 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858614922 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.858616114 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.858644962 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.858650923 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859489918 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859553099 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859576941 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859620094 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859637976 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859663010 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859688997 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859690905 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859713078 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859715939 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859730005 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859740019 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859764099 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859780073 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859785080 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859788895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859849930 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859857082 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859884024 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859908104 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859931946 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859935045 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859947920 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.859956026 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.859978914 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.860004902 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.862021923 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862057924 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862083912 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862108946 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862133026 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862133026 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.862159014 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862184048 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862200975 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.862206936 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.862209082 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862210989 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.862236977 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862261057 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862286091 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862292051 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.862297058 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.862299919 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.862312078 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.862354994 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.862371922 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.863698959 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863732100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863758087 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863774061 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.863782883 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863792896 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.863807917 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863809109 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.863831043 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863841057 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.863857031 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863862991 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.863882065 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863889933 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.863907099 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863917112 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.863931894 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863951921 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.863956928 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863980055 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.863990068 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.864005089 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.864021063 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.864049911 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.867624044 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.867661953 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.867773056 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.868344069 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.868365049 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.868366957 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.868367910 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.868396997 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.868452072 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.868458033 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.868489981 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.868515968 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.868535995 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.868540049 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.868566036 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.868582010 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.868586063 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.868591070 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.868606091 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.868617058 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.868633986 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.868640900 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.868652105 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.868678093 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.868709087 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869014978 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869041920 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869067907 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869081974 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869092941 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869118929 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869122028 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869144917 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869153023 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869169950 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869188070 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869194984 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869216919 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869220018 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869244099 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869245052 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869267941 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869270086 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869286060 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869294882 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869307041 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869338989 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869406939 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869452000 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869544029 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869570017 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869592905 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869594097 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869611025 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869617939 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869631052 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869642019 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869652033 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869666100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869678974 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869690895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869716883 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869750977 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869815111 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869839907 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869874954 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869880915 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869884014 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869909048 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.869930983 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.869961023 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.871884108 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.876331091 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876357079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876386881 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876413107 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876435995 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.876435995 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876445055 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.876461029 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876485109 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.876486063 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876507044 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.876511097 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876533985 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.876535892 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876557112 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.876560926 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876580000 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.876585007 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876597881 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.876610041 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876621008 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.876633883 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.876647949 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.876677036 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.878062010 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878127098 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878153086 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878176928 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878191948 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.878200054 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.878201962 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878201962 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.878211975 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.878226995 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878242970 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.878249884 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878273964 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878285885 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.878298044 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878319025 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.878321886 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878345966 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878350019 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.878370047 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.878379107 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.878412008 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.880179882 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880206108 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880230904 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880254030 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880263090 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.880279064 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880294085 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.880300045 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.880304098 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880327940 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880327940 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.880352020 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880358934 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.880376101 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880397081 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.880400896 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880418062 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.880426884 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880449057 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.880450964 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.880467892 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.880489111 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.883187056 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.883280039 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.887083054 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887109995 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887136936 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887161970 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887185097 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887187004 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.887202978 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.887204885 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887231112 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887232065 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.887250900 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.887258053 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887283087 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.887286901 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887310982 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887314081 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.887336016 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887342930 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.887361050 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887373924 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.887387037 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.887408972 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.887434959 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.888470888 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888537884 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888546944 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888569117 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888586998 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.888587952 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888607025 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888626099 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888645887 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888664961 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888684034 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888703108 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888724089 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.888739109 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.888834000 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890450954 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890475988 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890501976 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890511036 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890522957 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890527010 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890546083 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890552998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890568018 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890594959 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890609980 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890650034 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890657902 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890674114 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890698910 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890723944 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890726089 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890739918 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890743971 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890748024 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890758991 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890777111 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890800953 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.890800953 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890827894 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.890847921 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.892709017 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.893836975 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.895368099 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.895437956 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.897772074 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.897798061 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.897823095 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.897854090 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.897857904 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.897890091 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.897902966 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.897916079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.897917032 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.897922039 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.897941113 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.897950888 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.897968054 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.897975922 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.897991896 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.897994041 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.898014069 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.898015976 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.898039103 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.898040056 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.898060083 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.898063898 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.898085117 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.898103952 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.900166988 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900190115 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900209904 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900237083 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900263071 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900286913 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900310993 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900314093 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.900327921 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.900331020 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.900333881 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.900335073 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900360107 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900368929 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.900378942 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.900391102 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900415897 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.900415897 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900439978 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.900444031 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.900461912 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.900482893 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.903536081 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.903574944 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.903597116 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.903629065 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.903652906 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.903656960 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.903683901 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.903686047 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.903703928 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.903714895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.903732061 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.903743029 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.903769016 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.903772116 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.903788090 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.903800964 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.903819084 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.903826952 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.903840065 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.903882027 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.905028105 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.905059099 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.905112028 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.910748005 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912200928 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912237883 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912273884 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912287951 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.912309885 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912328959 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.912334919 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.912347078 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912365913 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.912383080 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912398100 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.912417889 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912429094 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.912455082 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912473917 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.912497997 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.912498951 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912534952 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912548065 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.912570953 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912576914 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.912606955 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.912625074 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.912652969 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.917334080 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.917426109 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.918756962 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.918781042 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.918798923 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.918828011 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.918837070 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.918849945 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.918859005 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.918869972 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.918886900 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.918900013 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.918909073 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.918929100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.918934107 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.918946981 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.918952942 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.918971062 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.918989897 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.919013977 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.919035912 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.922419071 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922451973 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922482967 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922482967 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.922498941 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.922507048 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922522068 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.922529936 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922553062 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922561884 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.922579050 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922584057 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.922588110 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.922602892 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922625065 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.922626019 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922646046 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922652960 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.922666073 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922686100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.922697067 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.922723055 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.922744036 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.925183058 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925206900 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925230026 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925262928 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.925298929 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.925379992 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925396919 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925414085 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925424099 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.925436020 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925456047 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.925457954 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925477982 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925488949 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.925499916 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925520897 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.925520897 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925540924 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925550938 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.925563097 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.925597906 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.925635099 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928251028 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928275108 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928297043 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928302050 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928318024 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928320885 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928340912 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928343058 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928361893 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928369999 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928384066 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928388119 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928406000 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928407907 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928426981 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928432941 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928447008 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928457022 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928471088 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928479910 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928493023 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.928497076 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928518057 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.928550005 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.929635048 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929656029 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929672956 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929692984 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929699898 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.929713964 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929732084 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929738998 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.929753065 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929773092 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929775953 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.929794073 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929799080 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.929814100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929826021 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.929836988 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929860115 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.929877996 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.929892063 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.929922104 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.930749893 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.930773973 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.930793047 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.930811882 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.930819988 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.930845022 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.930847883 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.930866957 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.930875063 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.930887938 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.930907965 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.930912018 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.930928946 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.930944920 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.930953979 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.930977106 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.930978060 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.930999041 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.931005955 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.931019068 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.931026936 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.931046963 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.931070089 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.932562113 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932584047 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932596922 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932615042 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932625055 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.932636976 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932657957 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932660103 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.932677984 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932693958 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932706118 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.932714939 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932737112 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.932756901 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932777882 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932797909 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.932813883 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.932852030 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.933204889 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933223009 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933240891 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933259964 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933269024 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.933281898 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933300018 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.933305025 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933321953 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933341026 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.933343887 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933362007 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933377981 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.933383942 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933402061 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933419943 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.933423996 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933442116 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.933470011 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.934973955 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935019016 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935043097 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935066938 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935080051 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.935092926 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935092926 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.935117006 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935132980 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.935141087 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935164928 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935179949 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.935189009 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935214996 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935225964 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.935237885 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935260057 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.935280085 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.936538935 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936575890 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936594963 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.936602116 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936628103 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936639071 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.936652899 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936678886 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936690092 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.936706066 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936731100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936739922 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.936757088 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936784983 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936794996 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.936806917 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936832905 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.936844110 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.939162970 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939202070 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939213037 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.939227104 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939251900 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939261913 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.939277887 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939301968 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939315081 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.939326048 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939349890 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939362049 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.939373970 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939399958 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939410925 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.939424038 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939449072 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939465046 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.939481974 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.939538002 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.940814972 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941145897 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941195011 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.941232920 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941261053 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941286087 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941298962 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.941310883 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941334009 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941346884 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.941356897 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941380978 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941402912 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.941407919 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941435099 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941442966 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.941461086 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941487074 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.941498995 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.943223953 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943259954 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943274021 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.943288088 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943312883 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943336964 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943337917 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.943361998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943370104 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.943387032 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943413973 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943422079 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.943439007 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943464994 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943483114 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.943490982 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943519115 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.943646908 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.944019079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944056034 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944080114 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944082975 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.944102049 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944116116 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.944128036 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944150925 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944173098 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944180012 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.944192886 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944212914 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944291115 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944310904 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.944318056 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944328070 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.944344044 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944355965 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.944369078 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.944401979 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.944974899 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945008993 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945034027 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945050955 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.945059061 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945082903 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945102930 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.945106983 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945131063 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945157051 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945158958 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.945190907 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945193052 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.945200920 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945225000 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945241928 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945260048 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.945291996 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.945812941 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945846081 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945888042 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945908070 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.945914030 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945939064 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945949078 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.945964098 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.945990086 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.946007013 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.946013927 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.946064949 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.946067095 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.946089029 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.946115971 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.946129084 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.946141958 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.946188927 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.947438002 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947474957 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947501898 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947526932 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947551012 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947551966 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.947573900 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947577000 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.947597980 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947612047 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.947621107 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947643995 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947665930 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947669029 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.947688103 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947704077 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.947710991 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947734118 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.947755098 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.948538065 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.948573112 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.948584080 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.948599100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.948625088 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.948651075 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.948651075 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.948676109 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.948688030 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.948699951 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.948724031 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.948733091 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.948748112 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.948774099 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.948786020 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.948798895 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.948834896 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.948879004 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950196981 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950233936 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950261116 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950267076 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.950285912 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950309992 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.950311899 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950339079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950351000 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.950366974 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950392962 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950409889 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.950419903 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950443029 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950468063 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950472116 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.950494051 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950512886 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.950519085 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.950570107 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.951688051 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.951724052 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.951751947 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.951776981 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.951783895 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.951800108 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.951813936 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.951824903 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.951852083 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.951865911 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.951878071 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.951901913 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.951911926 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.951925993 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.951951027 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.951966047 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.951977015 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.952014923 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.953608990 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953649044 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953677893 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953692913 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.953702927 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953727961 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953738928 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.953752995 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953774929 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953797102 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953798056 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.953819990 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953828096 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.953841925 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953881025 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.953881979 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953907967 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.953941107 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.955730915 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.955768108 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.955792904 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.955811977 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.955837965 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.955862045 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.955887079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.955912113 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.955912113 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.955936909 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.955945969 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.955961943 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.955971956 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.955986023 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.956006050 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.956010103 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.956037998 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.956068993 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.957576036 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.957612038 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.957638979 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.957639933 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.957663059 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.957684040 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.957686901 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.957710981 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.957724094 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.957736969 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.957762957 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.957776070 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.957787037 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.957813025 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.957835913 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.957837105 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.957874060 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.957880974 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959482908 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959518909 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959542036 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.959543943 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959568024 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959590912 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.959590912 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959615946 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959630966 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.959640980 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959667921 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959692955 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959693909 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.959718943 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959743023 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.959743977 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959769011 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.959784031 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.960258007 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960289955 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960308075 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.960314989 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960338116 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960360050 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.960362911 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960387945 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960411072 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.960412979 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960442066 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960453987 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.960467100 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960494041 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960503101 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.960520983 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960545063 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960556030 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.960568905 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.960602999 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.961684942 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.961721897 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.961749077 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.961772919 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.961796045 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.961805105 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.961821079 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.961843967 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.961846113 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.961868048 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.961884975 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.961909056 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.961932898 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.961937904 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.961958885 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.961972952 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.961985111 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.962028027 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.963078976 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963110924 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963136911 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963161945 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963166952 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.963186026 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963200092 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.963211060 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963236094 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963252068 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.963260889 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963285923 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963296890 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.963310957 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963335037 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963345051 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.963361979 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963387012 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.963402987 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:29.964896917 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:29.964947939 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:30.836503983 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:30.837018013 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:30.837959051 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:30.841279030 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:30.844026089 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:30.865356922 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:30.867403984 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:31.724813938 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:31.732631922 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:31.733264923 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:31.737682104 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:31.759099007 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:31.759215117 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:31.760737896 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:31.761127949 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:31.825802088 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:02:33.131758928 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:02:33.155558109 CET	9001	49754	89.163.146.190	192.168.2.3
Jan 31, 2022 10:03:05.934212923 CET	49745	443	192.168.2.3	37.252.187.111
Jan 31, 2022 10:03:05.934269905 CET	49754	9001	192.168.2.3	89.163.146.190
Jan 31, 2022 10:03:05.934326887 CET	49750	9001	192.168.2.3	66.111.2.16
Jan 31, 2022 10:03:05.934377909 CET	49749	443	192.168.2.3	154.35.175.225
Jan 31, 2022 10:03:05.934391975 CET	49755	443	192.168.2.3	95.216.19.206
Jan 31, 2022 10:03:05.934427977 CET	49753	443	192.168.2.3	185.225.68.133
Jan 31, 2022 10:03:09.088442087 CET	49796	443	192.168.2.3	34.117.59.81
Jan 31, 2022 10:03:09.088501930 CET	443	49796	34.117.59.81	192.168.2.3
Jan 31, 2022 10:03:09.088613987 CET	49796	443	192.168.2.3	34.117.59.81
Jan 31, 2022 10:03:09.300745964 CET	49796	443	192.168.2.3	34.117.59.81
Jan 31, 2022 10:03:09.300779104 CET	443	49796	34.117.59.81	192.168.2.3
Jan 31, 2022 10:03:09.346486092 CET	443	49796	34.117.59.81	192.168.2.3
Jan 31, 2022 10:03:09.346617937 CET	49796	443	192.168.2.3	34.117.59.81
Jan 31, 2022 10:03:09.596884012 CET	49796	443	192.168.2.3	34.117.59.81
Jan 31, 2022 10:03:09.596925974 CET	443	49796	34.117.59.81	192.168.2.3
Jan 31, 2022 10:03:09.597965002 CET	443	49796	34.117.59.81	192.168.2.3
Jan 31, 2022 10:03:09.598114014 CET	49796	443	192.168.2.3	34.117.59.81
Jan 31, 2022 10:03:09.602794886 CET	49796	443	192.168.2.3	34.117.59.81
Jan 31, 2022 10:03:09.649887085 CET	443	49796	34.117.59.81	192.168.2.3
Jan 31, 2022 10:03:09.729063034 CET	443	49796	34.117.59.81	192.168.2.3
Jan 31, 2022 10:03:09.729126930 CET	443	49796	34.117.59.81	192.168.2.3
Jan 31, 2022 10:03:09.730212927 CET	49796	443	192.168.2.3	34.117.59.81
Jan 31, 2022 10:03:09.730475903 CET	49796	443	192.168.2.3	34.117.59.81
Jan 31, 2022 10:03:09.730501890 CET	443	49796	34.117.59.81	192.168.2.3
Jan 31, 2022 10:03:30.232136965 CET	49808	443	192.168.2.3	88.214.35.62
Jan 31, 2022 10:03:30.232201099 CET	443	49808	88.214.35.62	192.168.2.3
Jan 31, 2022 10:03:30.232310057 CET	49808	443	192.168.2.3	88.214.35.62
Jan 31, 2022 10:03:30.233362913 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.234786987 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.256639957 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.256844997 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.262423038 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.263896942 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.289515018 CET	49808	443	192.168.2.3	88.214.35.62
Jan 31, 2022 10:03:30.289545059 CET	443	49808	88.214.35.62	192.168.2.3
Jan 31, 2022 10:03:30.290673971 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.291580915 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.313585997 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.316854000 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.319463968 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.320405006 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.320907116 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.322822094 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.342369080 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.342542887 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.343188047 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.352040052 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.353478909 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.353651047 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.365897894 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.366103888 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.366296053 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.383650064 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.383692026 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.383874893 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.388879061 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.392236948 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.412715912 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.415272951 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.416156054 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.417377949 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.419538975 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.419666052 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.419738054 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.443437099 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.443489075 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.443646908 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.443698883 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.443723917 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.445369959 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.449420929 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.465112925 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.465215921 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.465265036 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.465373039 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.466835976 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.467195034 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.467410088 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.467906952 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.483509064 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.483597040 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.483620882 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.483757019 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.483793974 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.484266996 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.484345913 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.484427929 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.488523960 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.488557100 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.488579988 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.488603115 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.488627911 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.488718033 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.488749981 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.490865946 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.490897894 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.491585970 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.491611958 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.491698980 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.491735935 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.493968010 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.494014025 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.494040012 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.494203091 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.494687080 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.494709015 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.494816065 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.495006084 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.496890068 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.497134924 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.504417896 CET	443	49808	88.214.35.62	192.168.2.3
Jan 31, 2022 10:03:30.504539967 CET	49808	443	192.168.2.3	88.214.35.62
Jan 31, 2022 10:03:30.506578922 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.506606102 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.506618023 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.506629944 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.506644964 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.506661892 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.506663084 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.506697893 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.506742954 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.512341022 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.512371063 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.512386084 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.512402058 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.512423038 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.512465000 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.513952017 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.513978958 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.514041901 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.515645027 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.515672922 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.515752077 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.517170906 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.517198086 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.517841101 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.517992020 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.518011093 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.518954992 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.518979073 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.519051075 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.520565987 CET	49808	443	192.168.2.3	88.214.35.62
Jan 31, 2022 10:03:30.520596981 CET	443	49808	88.214.35.62	192.168.2.3
Jan 31, 2022 10:03:30.520832062 CET	443	49808	88.214.35.62	192.168.2.3
Jan 31, 2022 10:03:30.521043062 CET	49808	443	192.168.2.3	88.214.35.62
Jan 31, 2022 10:03:30.521064997 CET	443	49808	88.214.35.62	192.168.2.3
Jan 31, 2022 10:03:30.523865938 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.523896933 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.523912907 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.523929119 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.523945093 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.524024963 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.524096966 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.524840117 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.524864912 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.524931908 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.524962902 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.525551081 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.526556969 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.526932955 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.528450966 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.528476954 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.528906107 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.528928041 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.529017925 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.529898882 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.529926062 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.530086994 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.530116081 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.530137062 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.530174017 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.530185938 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.530239105 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.530816078 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.530847073 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.530909061 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.530987024 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.531001091 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.531189919 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.531217098 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.531254053 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.531276941 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.533365011 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.533397913 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.533480883 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.533534050 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.534116030 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.534147978 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.534457922 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.534558058 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.534580946 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.534651041 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.535487890 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.535520077 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.535542965 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.535566092 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.535620928 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.535669088 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.535686016 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.536478043 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.536508083 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.536837101 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.537400961 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.537429094 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.537638903 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.537664890 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.537725925 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.537780046 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.537798882 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.538345098 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.538372040 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.538816929 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.539304018 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.539330959 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.539381981 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.539707899 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.539732933 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.539783001 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.539819956 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.540239096 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.540267944 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.540317059 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.540352106 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.541194916 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.541223049 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.541282892 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.541944027 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.541974068 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.542103052 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.542188883 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.542460918 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.542485952 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.543395042 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.543421030 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.543509007 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.543978930 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.544342041 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.544748068 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.544775009 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.544852018 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.544887066 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.544899940 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.547153950 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.547184944 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.547404051 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.547559023 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.547626019 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.547991991 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.548032045 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.548093081 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.548909903 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.548939943 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.549211979 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.549726963 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.549779892 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.550180912 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.550205946 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.550271988 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.550292969 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.551081896 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.551121950 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.551533937 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.551950932 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.551979065 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.552846909 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.552876949 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.552898884 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.552944899 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.552989006 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.553805113 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.553833961 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.553874016 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.553949118 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.554723978 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.554752111 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.554773092 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.554843903 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.556333065 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.556361914 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.556382895 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.556440115 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.556483984 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.557363033 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.557390928 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.557411909 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.557427883 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.557497025 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.558841944 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.558876991 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.558934927 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.559417963 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.559447050 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.559470892 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.559478045 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.559576988 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.559829950 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.559859037 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.560936928 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.562009096 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.562043905 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.562824965 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.564096928 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.564126968 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.564244032 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.565254927 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.566258907 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.566289902 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.566359997 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.568377018 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.568408966 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.570481062 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.570512056 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.570569038 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.572648048 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.572678089 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.572774887 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.574564934 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.574594975 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.574618101 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.575182915 CET	49808	443	192.168.2.3	88.214.35.62
Jan 31, 2022 10:03:30.575509071 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.576473951 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.576504946 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.577157974 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.577187061 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.577235937 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.577291012 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.577305079 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.577327013 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.577351093 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.577373028 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.577424049 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.577821016 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.577860117 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.577891111 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.577913046 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.577933073 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.577934980 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.577958107 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.577965975 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.577997923 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.578191996 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.578242064 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.578260899 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.578324080 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.579879045 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.580105066 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.580131054 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.581870079 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.581901073 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.581952095 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.581995010 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.583090067 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.583117962 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.583133936 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.583278894 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.583295107 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.583300114 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.583318949 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.583336115 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.583379030 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.583580017 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.583600044 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.583651066 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.583697081 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.583756924 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.583775997 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.583801985 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.583816051 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.583848953 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.584275961 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.584299088 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.584314108 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.584328890 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.584341049 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.584345102 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.584362030 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.584386110 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.584419012 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.585189104 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.585211992 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.585227013 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.585263968 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.585298061 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.585329056 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.585345984 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.585676908 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.585701942 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.585717916 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.585732937 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.585750103 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.585752964 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.585764885 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.585766077 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.585777044 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.585805893 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.586630106 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.586652994 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.586668015 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.586683989 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.586699963 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.586714983 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.586786032 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.586800098 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.587533951 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.587555885 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.587572098 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.587588072 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.587604046 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.587620020 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.587631941 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.587635994 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.587652922 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.587660074 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.587708950 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.588453054 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.588475943 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.588543892 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.589674950 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.589699984 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.589796066 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.590878010 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.590925932 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.590977907 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.591023922 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.592127085 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.592154026 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.592237949 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.592283010 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.593369961 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.593400955 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.593468904 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.593516111 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.594666958 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.594698906 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.594743967 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.594769955 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.595805883 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.595837116 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.595942020 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.597038031 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.597069025 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.597119093 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.597147942 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.597197056 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.597218990 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.597311020 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.597399950 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.598190069 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.598222017 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.598274946 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.599097967 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.599128008 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.599149942 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.599201918 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.599244118 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.599333048 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.599358082 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.599375010 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.599428892 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.599474907 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.599663019 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.599687099 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.599709988 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.599730968 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.599751949 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.599775076 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.599812984 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.599828959 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.600464106 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.600492954 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.600545883 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.600584984 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.601583004 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.601617098 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.601638079 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.601732016 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.602794886 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.602826118 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.603982925 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.604012012 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.604134083 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.605056047 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605087042 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605106115 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605127096 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605146885 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605166912 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605187893 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.605201960 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.605207920 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.605242014 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.605287075 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.605298996 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.605518103 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605542898 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605561972 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605581999 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605602026 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605622053 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.605628014 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.605683088 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.606219053 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.606297016 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.606405973 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.606467962 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.606491089 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.606511116 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.606533051 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.606553078 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.606555939 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.606580019 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.606586933 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.606631994 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.606658936 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.607407093 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.607434988 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.607454062 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.607515097 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.607572079 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.607578039 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.608573914 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.608599901 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.608649969 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.608679056 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.609705925 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.609734058 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.610749960 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.610776901 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.610851049 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.610899925 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.611910105 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.611942053 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.612782001 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.612809896 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.612885952 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.612936020 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.614572048 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.614603043 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.614845991 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.616400957 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.616430998 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.616539001 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.618376970 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.618405104 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.618424892 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.618489981 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.618540049 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.618751049 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.618784904 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.618894100 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.618913889 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.618933916 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.618979931 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.619030952 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.619674921 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.619705915 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.619729042 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.619870901 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.619888067 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.621149063 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.622000933 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.622033119 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.622054100 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.622169018 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.622407913 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.622421980 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.622433901 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.622456074 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.622466087 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.622518063 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.622648954 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.622720003 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.622741938 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.622802019 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.623121023 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.623147011 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.623169899 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.623192072 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.623213053 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.623233080 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.623265982 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.623306990 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.623318911 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.623389006 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.623423100 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.623445988 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.623471975 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.623578072 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.624066114 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.624093056 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.624114990 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.624125004 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.624140024 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.624159098 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.624161959 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.624183893 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.624212980 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.624267101 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.625016928 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.625045061 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.625066996 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.625087976 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.625109911 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.625129938 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.625128984 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.625159025 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.625190020 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.625488043 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.625510931 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.625531912 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.625648975 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.625665903 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.625936985 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.625963926 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.625984907 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.626004934 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.626015902 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.626041889 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.626054049 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.626065016 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.626090050 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.626137018 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.626871109 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.626898050 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.626919031 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.626939058 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.626957893 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.626977921 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.626985073 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.626998901 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.627019882 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.627031088 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.627041101 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.627074003 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.627101898 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.627806902 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.627830982 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.627850056 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.627871037 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.627892017 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.627911091 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.627932072 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.627940893 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.627954006 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.627976894 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.627981901 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.628002882 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.628022909 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.628736019 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.628767014 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.628787041 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.628808975 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.628810883 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.628833055 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.628853083 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.628863096 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.628916979 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.629633904 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.629657984 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.629679918 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.629699945 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.629710913 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.629722118 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.629744053 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.629760981 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.629810095 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.630397081 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.630423069 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.630446911 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.630470037 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.630492926 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.630517006 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.630523920 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.630542994 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.630568027 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.630575895 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.630592108 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.630614996 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.630620956 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.630666971 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.631344080 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.631375074 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.631398916 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.631422997 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.631444931 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.631445885 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.631469965 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.631483078 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.631493092 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.631548882 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.631850958 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.632258892 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.632286072 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.632309914 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.632332087 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.632450104 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.632460117 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.632498026 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.632627010 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.632852077 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.632879972 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.632904053 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.632931948 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.632953882 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.632961035 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.632977962 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.633002043 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.633002996 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.633023977 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.633038044 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.633071899 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.633609056 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.633635044 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.633657932 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.633699894 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.633754015 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.633861065 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.633888006 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.633908033 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.633928061 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.633950949 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.633955002 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.633974075 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.633999109 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.634144068 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.634223938 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.634247065 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.634280920 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.634304047 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.634349108 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.634356976 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.635699034 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.636281013 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.636384010 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.636411905 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.636434078 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.636487961 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.636528015 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.637679100 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.637707949 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.637729883 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.637784004 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.637932062 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.637985945 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.638010025 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.638067007 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.638077021 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.638406992 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.638433933 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.638453960 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.638475895 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.638497114 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.638520002 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.638520956 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.638585091 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.639193058 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.639223099 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.639244080 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.639329910 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.639460087 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.639519930 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.639544964 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.639568090 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.639590025 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.639612913 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.639659882 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.639981985 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.641592979 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.641624928 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.641645908 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.641685963 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.641701937 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.641758919 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.643588066 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.643621922 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.643642902 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.643663883 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.643713951 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.643775940 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.643841028 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.645081043 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.645328999 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.645353079 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.645374060 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.645442009 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.646119118 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.646147013 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.646222115 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.646275997 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.646298885 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.646302938 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.646337986 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.646645069 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.646667004 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.646686077 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.646755934 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.647053957 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.647079945 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.647103071 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.647125006 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.647149086 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.647165060 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.647171974 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.647212029 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.647247076 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.647267103 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.648479939 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.648509026 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.648533106 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.648613930 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.648776054 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.648833036 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.648850918 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.648875952 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.648926020 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.648937941 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.649079084 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.649102926 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.649130106 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.649158955 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.649528027 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.649554968 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.649578094 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.649600983 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.649616957 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.649624109 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.649647951 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.649669886 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.649704933 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.650286913 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.650311947 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.650333881 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.650356054 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.650376081 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.650396109 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.650407076 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.650418043 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.650440931 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.650985956 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.651036978 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.651061058 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.651128054 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.651194096 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.651217937 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.651238918 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.651261091 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.651283979 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.651302099 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.651329041 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.651489019 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.651897907 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.651928902 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.651949883 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.651972055 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.651993036 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.651993990 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.652015924 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.652017117 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.652039051 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.652057886 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.652832985 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.652862072 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.652883053 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.652904034 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.652919054 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.652928114 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.652950048 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.652951002 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.652972937 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.652997971 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.653028965 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.653836966 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.653889894 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.653913021 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.653934002 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.653955936 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.653978109 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.653994083 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.654000998 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.654057980 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.654217958 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.654241085 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.654263020 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.654284954 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.654308081 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.654335976 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.654624939 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.654649973 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.654670954 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.654691935 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.654712915 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.654733896 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.654737949 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.654758930 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.654781103 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.654808998 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.655484915 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.655534983 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.655606985 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.655627966 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.655651093 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.655673027 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.655709982 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.655788898 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.656331062 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.656357050 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.656383038 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.656404018 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.656452894 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.656474113 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.656476021 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.656497955 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.656518936 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.656548023 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.656646013 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.656708002 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.656729937 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.656750917 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.656805038 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.656853914 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.657459021 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.657776117 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.658355951 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658385992 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658407927 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658433914 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.658449888 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658473015 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658493996 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658515930 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.658560991 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.658807993 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658833981 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658855915 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658876896 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658879995 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.658900976 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658924103 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.658929110 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.658989906 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.659245014 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.659806013 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.661093950 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.661112070 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.661122084 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.661186934 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.661231041 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.661566973 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.662445068 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.662481070 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.662513018 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.662539005 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.662596941 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.662628889 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.662753105 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.662791967 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.662812948 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.662873030 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.665055990 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665087938 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665107965 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665127993 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.665148020 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.665167093 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.665188074 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.665205002 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.665206909 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665229082 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665247917 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665261030 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.665282011 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.665323019 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.665467978 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665489912 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665508986 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665529966 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665551901 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665570974 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.665575981 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.665594101 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.665615082 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.665632963 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.665647030 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.665653944 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.665657997 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.665698051 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.666394949 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.666424036 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.666445017 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.666481972 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.666513920 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.666548014 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.666735888 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.667114973 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.667139053 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.667164087 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.667175055 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.667186022 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.667186022 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.667217016 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.667253017 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.667993069 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.668015003 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.668035030 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.668056965 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.668085098 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.668131113 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.668874979 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.668905973 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.668929100 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.668951988 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.668986082 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.669017076 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.669646978 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.669672966 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.669696093 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.669719934 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.669758081 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.669812918 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.670438051 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.670463085 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.670535088 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.670569897 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.670612097 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.670665026 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.670849085 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.671323061 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.671351910 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.671374083 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.671396971 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.671399117 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.671422958 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.671447992 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.671462059 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.671468973 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.671473026 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.671494961 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.671514034 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.671515942 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.671535969 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.671552896 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.671700954 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.671722889 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.671745062 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.671776056 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.671808004 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.671850920 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.671921015 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.671945095 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.672002077 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.672110081 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.672252893 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.672278881 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.672301054 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.672324896 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.672343969 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.672384024 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.672395945 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.672835112 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.672858953 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.672920942 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.672941923 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.672960997 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.672985077 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.673024893 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.673190117 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.673218012 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.673240900 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.673264027 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.673288107 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.673301935 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.673310041 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.673342943 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.673371077 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.673687935 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.674005985 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.674036026 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.674057961 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.674081087 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.674103022 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.674206018 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.674220085 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.674676895 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.674748898 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.675916910 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.675951958 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.675977945 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.676048994 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.676099062 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.677191019 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.677215099 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.677292109 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.678083897 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.678153038 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.678739071 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.678771019 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.678792953 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.678869963 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.680028915 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680107117 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680130959 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680196047 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680207014 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.680226088 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680241108 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.680253983 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680288076 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.680305958 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680315971 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.680330992 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680350065 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.680354118 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680377007 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680377007 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.680399895 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680403948 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.680421114 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680434942 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.680443048 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.680483103 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.682215929 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.682246923 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.682270050 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.682332993 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.682414055 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.682790041 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.682882071 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.682904959 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.682925940 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.682948112 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.682995081 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.683043957 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.684180021 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.684329033 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.684434891 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.685481071 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.685508013 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.685530901 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.685554028 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.685586929 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.685636997 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.686666012 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.686702013 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.686721087 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.686741114 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.686759949 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.686801910 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.686841965 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.686944008 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.686969042 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.686991930 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.687052011 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.687155008 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.687180042 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.687203884 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.687226057 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.687261105 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.687298059 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.688349962 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.688381910 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.688404083 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.688427925 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.688452005 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.688473940 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.688492060 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.688496113 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.688497066 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.688522100 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.688545942 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.688560009 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.688568115 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.688596010 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.688641071 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.688662052 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.688680887 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.688711882 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.688743114 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.688927889 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.688951969 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.688976049 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689002037 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689026117 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689038992 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.689047098 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689069986 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689091921 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689094067 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.689114094 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689124107 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.689168930 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.689639091 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689666033 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689688921 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689709902 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689728975 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.689730883 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689757109 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689768076 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.689785004 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689810038 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689820051 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.689831018 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689863920 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.689872026 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689881086 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.689896107 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689914942 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.689925909 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.689937115 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.689958096 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.690004110 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.690562010 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.690586090 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.690613985 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.690642118 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.690666914 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.690674067 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.690691948 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.690769911 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.691025972 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691061020 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691088915 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691101074 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.691121101 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691145897 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691154003 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.691178083 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691200972 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.691209078 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691236019 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.691246033 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691276073 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.691278934 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691309929 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.691309929 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691337109 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.691337109 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691366911 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691368103 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.691395044 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.691396952 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.691426039 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.691426992 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.691456079 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.691457033 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.691485882 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.691509962 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.691596031 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.691659927 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.691942930 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691973925 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.691998005 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692028046 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692054987 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692070961 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.692087889 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692117929 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692127943 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.692147017 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692156076 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.692186117 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692199945 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.692219019 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692224026 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.692253113 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692254066 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.692281008 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692282915 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.692312002 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.692636013 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.692899942 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692929983 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692962885 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.692991018 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693020105 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.693022966 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693049908 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693073988 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.693077087 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693103075 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693109035 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.693130970 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693151951 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693152905 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.693180084 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693193913 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.693207979 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693254948 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.693532944 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.693806887 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693837881 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693878889 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693905115 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.693911076 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.693933010 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.693953991 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.693954945 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.693975925 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.693993092 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.693994999 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.694015980 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694034100 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.694035053 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694056988 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694076061 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694077015 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.694094896 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694113016 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.694116116 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694139004 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694160938 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694175959 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.694184065 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.694215059 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.694246054 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.694256067 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.694269896 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.694294930 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.694305897 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.694350004 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.694595098 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.694788933 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694819927 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694843054 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694873095 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694896936 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694911957 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.694922924 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694947958 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694951057 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.694972992 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.694994926 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695019960 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.695019960 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695045948 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695060968 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.695071936 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695089102 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.695096970 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695120096 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.695142984 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.695146084 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.695164919 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.695174932 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.695187092 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.695205927 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.695209026 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.695250034 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.695676088 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695703030 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695724964 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695746899 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695768118 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.695770025 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695792913 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695805073 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.695813894 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695833921 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695841074 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.695857048 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695892096 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695893049 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.695907116 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.695950031 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.695955992 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.695975065 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.696048975 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.696070910 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.696094036 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.696103096 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.696134090 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.696465969 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.696472883 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.696497917 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.696517944 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.696540117 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.696549892 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.696558952 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.696579933 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.696583986 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.696600914 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.696620941 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.696621895 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.696645021 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.696651936 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.696669102 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.696692944 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.696696997 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.696739912 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.696934938 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.696963072 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.696985006 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.696996927 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.697009087 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.697033882 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.697052956 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.697091103 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.697391987 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.697813988 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.697922945 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.697963953 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.698035955 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.698057890 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.698080063 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.698101044 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.698112965 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.698172092 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.698822021 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.698849916 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.698873043 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.698895931 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.698920012 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.698947906 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.698991060 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.699127913 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.699605942 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.699634075 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.699656010 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.699678898 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.699702978 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.699719906 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.699724913 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.699737072 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.699750900 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.699750900 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.699796915 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.699800014 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.699820042 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.699821949 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.699834108 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.699841976 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.699863911 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.699882030 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.699913979 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.699939013 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.699973106 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.700017929 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.700105906 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.700166941 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.700192928 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.700215101 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.700251102 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.700297117 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.700429916 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.700490952 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.700514078 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.700581074 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.700588942 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.700614929 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.700638056 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.700648069 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.700692892 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.700839043 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.700861931 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.700881958 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.700943947 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.701006889 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.701033115 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.701056957 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.701107979 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.701188087 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.701212883 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.701236010 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.701284885 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.701317072 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.701342106 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.701364994 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.701387882 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.701423883 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.701448917 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.701463938 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.701488018 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.701503038 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.701523066 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.701544046 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.701813936 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.701910973 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.701944113 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.701977968 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.702001095 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.702023983 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.702047110 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.702047110 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.702081919 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.702111959 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.702799082 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.702825069 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.702847958 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.702871084 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.702893972 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.702915907 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.702924013 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.702996016 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.703622103 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.703692913 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.703718901 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.703741074 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.703762054 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.703785896 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.703788042 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.703830957 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.704437971 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.704457998 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.704482079 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.704504967 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.704526901 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.704539061 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.704549074 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.704562902 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.704571962 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.704613924 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.704654932 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.705239058 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.705310106 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.705358028 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.705379009 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.705401897 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.705420971 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.705425978 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.705442905 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.705488920 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.706073046 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.706191063 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.706213951 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.706233025 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.706253052 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.706271887 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.706278086 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.706305981 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.706316948 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.706326962 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.706350088 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706355095 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.706372976 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706383944 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.706392050 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706415892 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706439018 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706439018 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.706479073 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.706609964 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706636906 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706660032 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706667900 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.706717968 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.706840038 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706866980 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706888914 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706912041 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.706948042 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.706980944 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.707453012 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.707479954 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.707503080 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.707526922 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.707550049 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.707573891 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.707597971 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.707631111 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.707778931 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.709021091 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.710925102 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.710957050 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.710978985 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.711064100 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.713093042 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.713124990 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.713145971 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.713166952 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.713186979 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.713207006 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.713227987 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.713238955 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.713252068 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.713277102 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.713285923 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.713299990 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.713323116 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.713335991 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.713346004 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.713397026 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.713429928 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.713453054 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.713474989 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.713495970 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.713501930 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.713516951 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.713517904 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.713540077 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.713565111 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.713591099 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.713999033 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.714483023 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.716887951 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.717209101 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.717235088 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.717255116 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.717273951 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.717293978 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.717315912 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.717349052 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.717413902 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.717946053 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718020916 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.718250990 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.718521118 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718544006 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718563080 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718585014 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718595028 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.718606949 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.718626022 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.718647003 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.718658924 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.718672037 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.718688965 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718698025 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.718729973 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718751907 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718782902 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.718869925 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718895912 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718918085 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718925953 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.718944073 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.718957901 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.718966007 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.719006062 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.719701052 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.720278025 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.720746040 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.720815897 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.721112967 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.722321033 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.722352982 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.722377062 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.722450972 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.722731113 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.722755909 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.722780943 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.722805977 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.722816944 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.722827911 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.722852945 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.722963095 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.722987890 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.723031998 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.723045111 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.723054886 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.723076105 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.723088026 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.723097086 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.723098993 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.723119974 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.723125935 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.723141909 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.723145008 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.723164082 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.723174095 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.723185062 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.723206043 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.723217964 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.723218918 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.723267078 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.723438025 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.723438025 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.723875046 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.723903894 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.723942041 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.723962069 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.723983049 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.724009037 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.724045038 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.724107027 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.724133968 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.724142075 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.724159956 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.724184036 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.724184036 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.724206924 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.724219084 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.724231005 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.724256039 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.724277020 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.724282026 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.724298954 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.724319935 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.724322081 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.724344969 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.724344969 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.724369049 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.724376917 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.724391937 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.724395990 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.724416018 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.724440098 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.724441051 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.724467993 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.724921942 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.725276947 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.725706100 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.725862026 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.725893974 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.725918055 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.725940943 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.725964069 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.725987911 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.725992918 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.726011038 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.726052046 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.726088047 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.727102995 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.727135897 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.727159023 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.727180958 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.727201939 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.727224112 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.727231026 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.727247000 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.727289915 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.727524042 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.727580070 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.727602959 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.727626085 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.727647066 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.727669001 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.727674961 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.727689028 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.727693081 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.727726936 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.727763891 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.727773905 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.727775097 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.727786064 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.727818966 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.727833986 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.727854967 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.727884054 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.727922916 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.727943897 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.727962017 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.728013992 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.728060961 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728084087 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728106976 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728130102 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.728154898 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.728157997 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.728180885 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728188992 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.728204012 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728228092 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728240967 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.728250980 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728272915 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.728286028 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.728318930 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.728851080 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728878975 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728899956 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728924036 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728945971 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728967905 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.728971004 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.728991985 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.729031086 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.729063034 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.729669094 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.729696035 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.729732037 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.729754925 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.729779959 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.729804039 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.729826927 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.729830027 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.729831934 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.729866028 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.729888916 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.729897022 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.729912996 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.729912996 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.729934931 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.729948044 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.729958057 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.729979038 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.729981899 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.729998112 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730021000 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.730051041 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.730079889 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730101109 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730119944 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730138063 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730156898 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.730159044 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730199099 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.730365038 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730390072 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730412960 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730437040 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730452061 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.730484962 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.730561018 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730586052 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730608940 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730632067 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730654955 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730659008 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.730676889 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730691910 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.730699062 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.730720997 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.730741024 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.730760098 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.730767965 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.730782032 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.730802059 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.730811119 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.730822086 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.730843067 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.730870962 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.730873108 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730895996 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730910063 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.730945110 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.730990887 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.731291056 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.731412888 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.731472969 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.731523991 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.731534958 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.731548071 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.731570959 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.731591940 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.731595039 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.731621027 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.731625080 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.731673002 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.731739998 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.731764078 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.731786013 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.731806993 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.731807947 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.731872082 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.731915951 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.731939077 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.731961012 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.731980085 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.731985092 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732008934 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732031107 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732057095 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.732095957 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.732198000 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732223034 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.732247114 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732306004 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.732311010 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.732314110 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.732368946 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.732553005 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.732574940 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.732595921 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.732615948 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.732635975 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.732657909 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.732659101 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.732683897 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.732707977 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732717991 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.732731104 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732747078 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.732753038 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732778072 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732795954 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.732852936 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732877016 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732917070 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.732924938 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.732968092 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.733000040 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733025074 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733047962 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733069897 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733091116 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733098984 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.733115911 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733146906 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.733175039 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.733355999 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733381987 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733405113 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733428001 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.733450890 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.733474016 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.733498096 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.733498096 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.733524084 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.733546972 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.733546972 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.733571053 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.733575106 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.733593941 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733611107 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.733618021 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733639956 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.733642101 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733685017 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733686924 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.733709097 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733732939 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733755112 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733758926 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.733779907 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733803034 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.733803988 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.733863115 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.734019995 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734041929 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734061956 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734098911 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.734169960 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734194040 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734219074 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734242916 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.734265089 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.734271049 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.734289885 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.734313965 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.734318018 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.734338045 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.734350920 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.734364033 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.734381914 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.734389067 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.734416008 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.734424114 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.734441042 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734455109 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.734467030 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734491110 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734514952 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734524965 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.734539032 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734558105 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.734560013 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734597921 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.734786987 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734814882 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734838009 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734862089 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734884977 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734898090 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.734908104 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734932899 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.734934092 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734958887 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734970093 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.734982967 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.734999895 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.735007048 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735030890 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735043049 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.735055923 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735085011 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.735110998 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.735141039 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.735162020 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.735187054 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.735210896 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.735234022 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.735236883 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.735259056 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.735277891 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.735285997 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.735301018 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.735320091 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.735346079 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.735362053 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735423088 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735443115 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735461950 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735481024 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735491037 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.735508919 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735510111 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.735532999 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735554934 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.735555887 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735582113 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735582113 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.735609055 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735630035 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.735634089 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735657930 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735681057 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735702991 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735703945 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.735727072 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735743046 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.735749960 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.735769987 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.735966921 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.736042023 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.736063957 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.736083984 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.736104965 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.736108065 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.736125946 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.736145020 CET	888	49809	31.121.161.188	192.168.2.3
Jan 31, 2022 10:03:30.736172915 CET	49809	888	192.168.2.3	31.121.161.188
Jan 31, 2022 10:03:30.736262083 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.736313105 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736337900 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736361027 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736362934 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.736387014 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736396074 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.736412048 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736435890 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736459017 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736466885 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.736481905 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736495018 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.736507893 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736529112 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736548901 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736568928 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.736572027 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736597061 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736617088 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.736619949 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736644030 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736648083 CET	49810	9001	192.168.2.3	62.133.35.244
Jan 31, 2022 10:03:30.736668110 CET	9001	49810	62.133.35.244	192.168.2.3
Jan 31, 2022 10:03:30.736689091 CET	49810	9001	192.168.2.3	62.133.35.244

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jan 31, 2022 10:03:09.057245016 CET	192.168.2.3	8.8.8.8	0x2303	Standard query (0)	myexternalip.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jan 31, 2022 10:03:09.076396942 CET	8.8.8.8	192.168.2.3	0x2303	No error (0)	myexternalip.com		34.117.59.81	A (IP address)	IN (0x0001)

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: y8uLBHoe4J.exePID: 7076, Parent PID: 6056

General

Target ID:	0
Start time:	10:02:03
Start date:	31/01/2022
Path:	C:\Users\user\Desktop\y8uLBHoe4J.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\y8uLBHoe4J.exe"
Imagebase:	0x400000
File size:	8177152 bytes
MD5 hash:	D7699AFCF044B90A9F22BD4ED2662C88
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: dllhost.exePID: 5608, Parent PID: 7076

General

Target ID:	2
Start time:	10:02:12
Start date:	31/01/2022
Path:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Imagebase:	0x260000
File size:	996352 bytes
MD5 hash:	5CFE61FF895C7DAA889708665EF05D7B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 32%, Metadefender, Browse Detection: 63%, ReversingLabs
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: dllhost.exePID: 5864, Parent PID: 7076

General

Target ID:	11
Start time:	10:03:01
Start date:	31/01/2022
Path:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Imagebase:	0x260000
File size:	996352 bytes
MD5 hash:	5CFE61FF895C7DAA889708665EF05D7B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: dllhost.exePID: 6496, Parent PID: 7076

General

Target ID:	13
Start time:	10:03:12
Start date:	31/01/2022
Path:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Imagebase:	0x7ff62a980000
File size:	996352 bytes
MD5 hash:	5CFE61FF895C7DAA889708665EF05D7B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: dllhost.exePID: 5188, Parent PID: 7076

General

Target ID:	14
Start time:	10:03:12
Start date:	31/01/2022
Path:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Imagebase:	0x260000
File size:	996352 bytes
MD5 hash:	5CFE61FF895C7DAA889708665EF05D7B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: dllhost.exePID: 6668, Parent PID: 7076

General

Target ID:	18
Start time:	10:03:50
Start date:	31/01/2022
Path:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Imagebase:	0x260000
File size:	996352 bytes
MD5 hash:	5CFE61FF895C7DAA889708665EF05D7B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: dllhost.exePID: 5372, Parent PID: 7076

General

Target ID:	21
Start time:	10:03:59
Start date:	31/01/2022
Path:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Imagebase:	0x260000
File size:	996352 bytes
MD5 hash:	5CFE61FF895C7DAA889708665EF05D7B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: dllhost.exePID: 5300, Parent PID: 7076

General

Target ID:	22
Start time:	10:04:00
Start date:	31/01/2022
Path:	C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe" -f torrc
Imagebase:	0x260000
File size:	996352 bytes
MD5 hash:	5CFE61FF895C7DAA889708665EF05D7B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: y8uLBHoe4J.exePID: 7076, Parent PID: 6056COMMON

Execution Graph

Execution Coverage:	12%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.1%
Total number of Nodes:	576
Total number of Limit Nodes:	14

Executed Functions

Function 006940A8 Relevance: 7.6, APIs: 5, Instructions: 62
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 74%

			E006940A8(void* __ecx, long _a4) {
				intOrPtr _v0;
				void* _v9;
				struct HINSTANCE__* _t12;
				void* _t13;
				void* _t22;
				intOrPtr _t24;
				intOrPtr _t25;
				intOrPtr* _t26;

				_t22 = __ecx;
				_t12 = E006A92B3(__ecx);
				if(_t12 == 0) {
					L1:
					ExitThread(_a4);
				}
				_t25 =  *((intOrPtr*)(_t12 + 0x360));
				if(_t25 == 0) {
					goto L1;
				}
				_t33 =  *((char*)(_t25 + 0x10));
				if( *((char*)(_t25 + 0x10)) != 0) {
					E006AAE1D(__ecx, _t33);
				}
				_t13 =  *(_t25 + 8);
				if(_t13 != 0xffffffff && _t13 != 0) {
					CloseHandle(_t13);
				}
				_t12 =  *(_t25 + 0xc);
				if(_t12 == 0xffffffff || _t12 == 0) {
					goto L1;
				}
				FreeLibraryAndExitThread(_t12, _a4); // executed
				asm("int3");
				_push(_t22);
				_push(_t25);
				_t26 = E0069FA12(_t22, 1, 0x14);
				E0069FA6F(0);
				if(_t26 != 0) {
					_t24 = _v0;
					 *(_t26 + 4) = _a4;
					_t10 = _t26 + 0xc; // 0xc
					 *_t26 = _t24;
					__imp__GetModuleHandleExW(4, _t24, _t10);
				}
				E00694071(0);
				return _t26;
			}

0x006940a8
0x006940ae
0x006940b5
0x006940b7
0x006940ba
0x006940ba
0x006940c0
0x006940c8
0x00000000
0x00000000
0x006940ca
0x006940ce
0x006940d0
0x006940d0
0x006940d5
0x006940db
0x006940e2
0x006940e2
0x006940e8
0x006940ee
0x00000000
0x00000000
0x006940f8
0x006940fe
0x00694104
0x00694105
0x00694111
0x00694113
0x0069411d
0x00694122
0x00694125
0x00694128
0x0069412f
0x00694131
0x00694131
0x0069413c
0x00694147

APIs

Part of subcall function 006A92B3: GetLastError.KERNEL32(?,?,?,0069B422,0069FA64,?,006A925D,00000001,00000364,?,00694019,007877E0,00000010), ref: 006A92B8
Part of subcall function 006A92B3: _free.LIBCMT ref: 006A92ED
Part of subcall function 006A92B3: SetLastError.KERNEL32(00000000), ref: 006A9321

ExitThread.KERNEL32 ref: 006940BA
CloseHandle.KERNEL32(?,?,?,00694266,?,?,00694051,00000000), ref: 006940E2
FreeLibraryAndExitThread.KERNEL32(?,?,?,?,00694266,?,?,00694051,00000000), ref: 006940F8
_free.LIBCMT ref: 00694113
GetModuleHandleExW.KERNEL32(00000004,?,0000000C), ref: 00694131

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: ErrorExitHandleLastThread_free$CloseFreeLibraryModule
String ID:
API String ID: 333161861-0
Opcode ID: fad6f04102c5d95e13390de6d883d0873742ecab128a770489108cbc6b3d36c3
Instruction ID: 4b6d379836116af7d46cafc2f9e24e5eed40f34ad2a663e663e62840842acd61
Opcode Fuzzy Hash: fad6f04102c5d95e13390de6d883d0873742ecab128a770489108cbc6b3d36c3
Instruction Fuzzy Hash: 40118231500704ABDF209B64DC49FA6779EAF00720F044619FE299BA91DF71DD51C795

Uniqueness

Uniqueness Score: -1.00%

Function 006A7EF2 Relevance: 4.7, APIs: 3, Instructions: 186
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 97%

			E006A7EF2(void* __fp0, signed int _a4, void* _a8, signed int _a12) {
				signed int _v8;
				long _v12;
				struct _OVERLAPPED* _v16;
				long _v20;
				char _v24;
				signed int _v28;
				signed int _v32;
				intOrPtr _v36;
				signed int _v40;
				signed int _v44;
				intOrPtr _v48;
				void* _v52;
				void* __ebx;
				signed int _t62;
				intOrPtr _t66;
				signed char _t68;
				signed int _t69;
				signed int _t71;
				signed int _t73;
				signed int _t74;
				signed int _t75;
				signed int _t76;
				intOrPtr _t78;
				signed int _t80;
				signed int _t84;
				signed int _t87;
				signed int _t101;
				signed int _t102;
				signed int _t105;
				intOrPtr _t107;
				signed int _t112;
				signed int _t114;
				void* _t116;
				signed int _t120;
				signed int _t123;
				signed int _t125;
				void* _t126;
				void* _t131;

				_t131 = __fp0;
				_t62 =  *0x78ebd8; // 0x74f54c6e
				_v8 = _t62 ^ _t125;
				_t105 = _a12;
				_v12 = _t105;
				_t120 = _a4;
				_t116 = _a8;
				_v52 = _t116;
				if(_t105 != 0) {
					__eflags = _t116;
					if(_t116 != 0) {
						_t101 = _t120 >> 6;
						_t114 = (_t120 & 0x0000003f) * 0x30;
						_v32 = _t101;
						_t66 =  *((intOrPtr*)(0x79fc80 + _t101 * 4));
						_v48 = _t66;
						_v28 = _t114;
						_t102 =  *((intOrPtr*)(_t66 + _t114 + 0x29));
						__eflags = _t102 - 2;
						if(_t102 == 2) {
							L6:
							_t68 =  !_t105;
							__eflags = _t68 & 0x00000001;
							if((_t68 & 0x00000001) != 0) {
								_t66 = _v48;
								L9:
								__eflags =  *(_t66 + _t114 + 0x28) & 0x00000020;
								if(__eflags != 0) {
									E006A38C2(_t120, 0, 0, 2);
									_t126 = _t126 + 0x10;
								}
								_t69 = E006A7A97(_t102, _t114, __eflags, _t131, _t120);
								__eflags = _t69;
								if(_t69 == 0) {
									_t107 =  *((intOrPtr*)(0x79fc80 + _v32 * 4));
									_t71 = _v28;
									__eflags =  *(_t107 + _t71 + 0x28) & 0x00000080;
									if(( *(_t107 + _t71 + 0x28) & 0x00000080) == 0) {
										_v24 = 0;
										_v20 = 0;
										_v16 = 0;
										_t73 = WriteFile( *(_t107 + _t71 + 0x18), _t116, _v12,  &_v20, 0); // executed
										__eflags = _t73;
										if(_t73 == 0) {
											_v24 = GetLastError();
										}
										goto L28;
									}
									_t84 = _t102;
									__eflags = _t84;
									if(_t84 == 0) {
										E006A7B0D( &_v24, _t120, _t116, _v12);
										goto L17;
									}
									_t87 = _t84 - 1;
									__eflags = _t87;
									if(_t87 == 0) {
										_t86 = E006A7CDA( &_v24, _t120, _t116, _v12);
										goto L17;
									}
									__eflags = _t87 != 1;
									if(_t87 != 1) {
										goto L34;
									}
									_t86 = E006A7BEC( &_v24, _t120, _t116, _v12);
									goto L17;
								} else {
									__eflags = _t102;
									if(_t102 == 0) {
										_t86 = E006A7877(_t131,  &_v24, _t120, _t116, _v12);
										L17:
										L15:
										L28:
										asm("movsd");
										asm("movsd");
										asm("movsd");
										_t74 = _v40;
										__eflags = _t74;
										if(_t74 != 0) {
											_t75 = _t74 - _v36;
											__eflags = _t75;
											L40:
											L41:
											E0068975C();
											return _t75;
										}
										_t76 = _v44;
										__eflags = _t76;
										if(_t76 == 0) {
											_t116 = _v52;
											L34:
											_t112 = _v28;
											_t78 =  *((intOrPtr*)(0x79fc80 + _v32 * 4));
											__eflags =  *(_t78 + _t112 + 0x28) & 0x00000040;
											if(( *(_t78 + _t112 + 0x28) & 0x00000040) == 0) {
												L37:
												 *((intOrPtr*)(E0069B41D())) = 0x1c;
												_t80 = E0069B40A();
												 *_t80 =  *_t80 & 0x00000000;
												__eflags =  *_t80;
												L38:
												_t75 = _t80 | 0xffffffff;
												goto L40;
											}
											__eflags =  *_t116 - 0x1a;
											if( *_t116 != 0x1a) {
												goto L37;
											}
											_t75 = 0;
											goto L40;
										}
										_t123 = 5;
										__eflags = _t76 - _t123;
										if(_t76 != _t123) {
											_t80 = E0069B3E7(_t76);
										} else {
											 *((intOrPtr*)(E0069B41D())) = 9;
											_t80 = E0069B40A();
											 *_t80 = _t123;
										}
										goto L38;
									}
									__eflags = _t102 - 1 - 1;
									if(_t102 - 1 > 1) {
										goto L34;
									}
									E006A7A2A( &_v24, _t116, _v12);
									goto L15;
								}
							}
							 *(E0069B40A()) =  *_t94 & 0x00000000;
							 *((intOrPtr*)(E0069B41D())) = 0x16;
							_t80 = E00693F15();
							goto L38;
						}
						__eflags = _t102 - 1;
						if(_t102 != 1) {
							goto L9;
						}
						goto L6;
					}
					 *(E0069B40A()) =  *_t96 & _t116;
					 *((intOrPtr*)(E0069B41D())) = 0x16;
					_t75 = E00693F15() | 0xffffffff;
					goto L41;
				}
				_t75 = 0;
				goto L41;
			}

0x006a7ef2
0x006a7efa
0x006a7f01
0x006a7f04
0x006a7f07
0x006a7f0b
0x006a7f0f
0x006a7f12
0x006a7f17
0x006a7f20
0x006a7f22
0x006a7f48
0x006a7f4e
0x006a7f51
0x006a7f54
0x006a7f5b
0x006a7f5e
0x006a7f61
0x006a7f65
0x006a7f68
0x006a7f6f
0x006a7f71
0x006a7f73
0x006a7f75
0x006a7f94
0x006a7f97
0x006a7f97
0x006a7f9c
0x006a7fa5
0x006a7faa
0x006a7faa
0x006a7fae
0x006a7fb4
0x006a7fb6
0x006a7ff4
0x006a7ffb
0x006a7ffe
0x006a8003
0x006a8052
0x006a8055
0x006a8058
0x006a8064
0x006a806a
0x006a806c
0x006a8074
0x006a8074
0x00000000
0x006a8077
0x006a8008
0x006a8008
0x006a800b
0x006a8044
0x00000000
0x006a8044
0x006a800d
0x006a800d
0x006a8010
0x006a8034
0x00000000
0x006a8034
0x006a8012
0x006a8015
0x00000000
0x00000000
0x006a8024
0x00000000
0x006a7fb8
0x006a7fb8
0x006a7fba
0x006a7fe7
0x006a7fec
0x006a7fd7
0x006a807a
0x006a807d
0x006a807e
0x006a807f
0x006a8080
0x006a8083
0x006a8085
0x006a80ea
0x006a80ea
0x006a80ed
0x006a80ee
0x006a80f5
0x006a80fd
0x006a80fd
0x006a8087
0x006a808a
0x006a808c
0x006a80b2
0x006a80b5
0x006a80b8
0x006a80bb
0x006a80c2
0x006a80c7
0x006a80d2
0x006a80d7
0x006a80dd
0x006a80e2
0x006a80e2
0x006a80e5
0x006a80e5
0x00000000
0x006a80e5
0x006a80c9
0x006a80cc
0x00000000
0x00000000
0x006a80ce
0x00000000
0x006a80ce
0x006a8090
0x006a8091
0x006a8093
0x006a80aa
0x006a8095
0x006a809a
0x006a80a0
0x006a80a5
0x006a80a5
0x00000000
0x006a8093
0x006a7fbe
0x006a7fc1
0x00000000
0x00000000
0x006a7fcf
0x00000000
0x006a7fd4
0x006a7fb6
0x006a7f7c
0x006a7f84
0x006a7f8a
0x00000000
0x006a7f8a
0x006a7f6a
0x006a7f6d
0x00000000
0x00000000
0x00000000
0x006a7f6d
0x006a7f29
0x006a7f30
0x006a7f3b
0x00000000
0x006a7f3b
0x006a7f19
0x00000000

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ea880535526f4667d25a74e47fef655ec67d690329674373c81bfbd5298cf9f
Instruction ID: 8e6cba440f8f9587cfea0b779c996e4afd32a196b2794a71a532156a80b4550c
Opcode Fuzzy Hash: 1ea880535526f4667d25a74e47fef655ec67d690329674373c81bfbd5298cf9f
Instruction Fuzzy Hash: 69519D71904209AFDF20AFA4DC45EEE7BBAAF1B310F144059E800A7292DB749E06DF65

Uniqueness

Uniqueness Score: -1.00%

Function 00693FF4 Relevance: 3.0, APIs: 2, Instructions: 38
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 55%

			E00693FF4(void* __ebx, void* __ecx, void* __edx, void* __edi, void* __fp0) {
				void* _t11;
				void* _t13;
				signed int _t18;
				void* _t23;
				void* _t28;
				intOrPtr* _t30;
				void* _t32;

				_t28 = __edx;
				_t23 = __ecx;
				E006B8D40(__ebx, __edi, 0x7877e0, 0x10);
				_t30 =  *((intOrPtr*)(_t32 + 8));
				if(_t30 == 0) {
					ExitThread(GetLastError());
				}
				 *((intOrPtr*)(E006A922F(__ebx, _t23, _t28, __fp0) + 0x360)) = _t30;
				_t11 = E006AAFD6(_t23);
				_t34 = _t11;
				if(_t11 != 0) {
					_t18 = E006AADCB(_t23, _t34, 1);
					asm("sbb al, al");
					 *((char*)(_t30 + 0x10)) =  ~_t18 + 1;
				}
				 *(_t32 - 4) =  *(_t32 - 4) & 0x00000000;
				 *0x6e03d8( *((intOrPtr*)(_t30 + 4))); // executed
				_t13 =  *((intOrPtr*)( *_t30))(); // executed
				_push(_t13); // executed
				E00694259( *_t30); // executed
				 *((intOrPtr*)(_t32 - 0x20)) =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t32 - 0x14))))));
				return E006A4570( *((intOrPtr*)(_t32 - 0x14)),  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t32 - 0x14)))))),  *((intOrPtr*)(_t32 - 0x14)));
			}

0x00693ff4
0x00693ff4
0x00693ffb
0x00694000
0x00694005
0x0069400e
0x0069400e
0x00694019
0x0069401f
0x00694024
0x00694026
0x0069402a
0x00694031
0x00694035
0x00694035
0x00694038
0x00694043
0x00694049
0x0069404b
0x0069404c
0x00694058
0x00694064

APIs

GetLastError.KERNEL32(007877E0,00000010), ref: 00694007
ExitThread.KERNEL32 ref: 0069400E

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: 2259151bd440087cda23c8d102d508184356c71ec9facd153505bbfb58cb3399
Instruction ID: eac6077b5627b152f52a349b86ce4a3168bb04dfba48cb306eda923795ec036e
Opcode Fuzzy Hash: 2259151bd440087cda23c8d102d508184356c71ec9facd153505bbfb58cb3399
Instruction Fuzzy Hash: BFF08C71940204AFDF44BFB0D84AAAD3BA6BF45700F204049F4016B6A2CBB4AD41DB65

Uniqueness

Uniqueness Score: -1.00%

Function 0069FA12 Relevance: 1.5, APIs: 1, Instructions: 39
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 95%

			E0069FA12(void* __ecx, signed int _a4, signed int _a8) {
				void* _t8;
				void* _t12;
				signed int _t13;
				void* _t15;
				signed int _t18;
				long _t19;

				_t15 = __ecx;
				_t18 = _a4;
				if(_t18 == 0) {
					L2:
					_t19 = _t18 * _a8;
					if(_t19 == 0) {
						_t19 = _t19 + 1;
					}
					while(1) {
						_t8 = RtlAllocateHeap( *0x7a0038, 8, _t19); // executed
						if(_t8 != 0) {
							break;
						}
						__eflags = E006A660A();
						if(__eflags == 0) {
							L8:
							 *((intOrPtr*)(E0069B41D())) = 0xc;
							__eflags = 0;
							return 0;
						}
						_t12 = E006A44DA(_t15, __eflags, _t19);
						_pop(_t15);
						__eflags = _t12;
						if(_t12 == 0) {
							goto L8;
						}
					}
					return _t8;
				}
				_t13 = 0xffffffe0;
				if(_t13 / _t18 < _a8) {
					goto L8;
				}
				goto L2;
			}

0x0069fa12
0x0069fa18
0x0069fa1d
0x0069fa2b
0x0069fa2b
0x0069fa31
0x0069fa33
0x0069fa33
0x0069fa4a
0x0069fa53
0x0069fa5b
0x00000000
0x00000000
0x0069fa3b
0x0069fa3d
0x0069fa5f
0x0069fa64
0x0069fa6a
0x00000000
0x0069fa6a
0x0069fa40
0x0069fa45
0x0069fa46
0x0069fa48
0x00000000
0x00000000
0x0069fa48
0x00000000
0x0069fa4a
0x0069fa23
0x0069fa29
0x00000000
0x00000000
0x00000000

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,006A925D,00000001,00000364,?,00694019,007877E0,00000010), ref: 0069FA53

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 3c23660a21ad2e462de00a57121c1483a83682750325c3113940d13b4d1180a9
Instruction ID: 59fa9dc5a05e3ef57447988ec9aa5b39286c7bd71e3459bf32cee71c9abc08cc
Opcode Fuzzy Hash: 3c23660a21ad2e462de00a57121c1483a83682750325c3113940d13b4d1180a9
Instruction Fuzzy Hash: 1DF0B431611220EADF216F229D05B9B379FDF417B0B169071F80CDBA91CA70DC0186E0

Uniqueness

Uniqueness Score: -1.00%

Function 006A03DE Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 94%

			E006A03DE(void* __ecx, long _a4) {
				void* _t4;
				void* _t6;
				void* _t7;
				long _t8;

				_t7 = __ecx;
				_t8 = _a4;
				if(_t8 > 0xffffffe0) {
					L7:
					 *((intOrPtr*)(E0069B41D())) = 0xc;
					__eflags = 0;
					return 0;
				}
				if(_t8 == 0) {
					_t8 = _t8 + 1;
				}
				while(1) {
					_t4 = RtlAllocateHeap( *0x7a0038, 0, _t8); // executed
					if(_t4 != 0) {
						break;
					}
					__eflags = E006A660A();
					if(__eflags == 0) {
						goto L7;
					}
					_t6 = E006A44DA(_t7, __eflags, _t8);
					_pop(_t7);
					__eflags = _t6;
					if(_t6 == 0) {
						goto L7;
					}
				}
				return _t4;
			}

0x006a03de
0x006a03e4
0x006a03ea
0x006a041c
0x006a0421
0x006a0427
0x00000000
0x006a0427
0x006a03ee
0x006a03f0
0x006a03f0
0x006a0407
0x006a0410
0x006a0418
0x00000000
0x00000000
0x006a03f8
0x006a03fa
0x00000000
0x00000000
0x006a03fd
0x006a0402
0x006a0403
0x006a0405
0x00000000
0x00000000
0x006a0405
0x00000000

APIs

RtlAllocateHeap.NTDLL(00000000,00000003,00000003,?,006AA0EE,00001000,00000000,?,?,?,0069FB7B,00000000,00000000,00000000,?,?), ref: 006A0410

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 6b22095144da70cbec31f193c9388207d853bd3e62e9af16367f76d79eb0748f
Instruction ID: 713e5a29a9df1dafbdf4fad41dfc9c9a417919472e0258bfa410057465517240
Opcode Fuzzy Hash: 6b22095144da70cbec31f193c9388207d853bd3e62e9af16367f76d79eb0748f
Instruction Fuzzy Hash: F7E0E521605215D7FB213A619D00B9B3ACFFF5B3A0F094030FE04A6282CB64DC518DA6

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00693D4B Relevance: 4.6, APIs: 3, Instructions: 78
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 84%

			E00693D4B(intOrPtr __ebx, intOrPtr __edx, intOrPtr __esi, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				char _v0;
				signed int _v8;
				intOrPtr _v524;
				intOrPtr _v528;
				void* _v532;
				intOrPtr _v536;
				char _v540;
				intOrPtr _v544;
				intOrPtr _v548;
				intOrPtr _v552;
				intOrPtr _v556;
				intOrPtr _v560;
				intOrPtr _v564;
				intOrPtr _v568;
				intOrPtr _v572;
				intOrPtr _v576;
				intOrPtr _v580;
				intOrPtr _v584;
				char _v724;
				intOrPtr _v792;
				intOrPtr _v800;
				char _v804;
				struct _EXCEPTION_POINTERS _v812;
				signed int _t40;
				char* _t47;
				char* _t49;
				long _t57;
				intOrPtr _t59;
				intOrPtr _t60;
				intOrPtr _t64;
				intOrPtr _t65;
				int _t66;
				intOrPtr _t68;
				signed int _t70;
				signed int _t72;

				_t68 = __esi;
				_t64 = __edx;
				_t59 = __ebx;
				_t70 = _t72;
				_t40 =  *0x78ebd8; // 0x74f54c6e
				_t41 = _t40 ^ _t70;
				_v8 = _t40 ^ _t70;
				_push(_t65);
				if(_a4 != 0xffffffff) {
					_push(_a4);
					E0068AA40(_t41);
					_pop(_t60);
				}
				E00503EFD( &_v804, 0, 0x50);
				E00503EFD( &_v724, 0, 0x2cc);
				_v812.ExceptionRecord =  &_v804;
				_t47 =  &_v724;
				_v812.ContextRecord = _t47;
				_v548 = _t47;
				_v552 = _t60;
				_v556 = _t64;
				_v560 = _t59;
				_v564 = _t68;
				_v568 = _t65;
				_v524 = ss;
				_v536 = cs;
				_v572 = ds;
				_v576 = es;
				_v580 = fs;
				_v584 = gs;
				asm("pushfd");
				_pop( *_t22);
				_v540 = _v0;
				_t49 =  &_v0;
				_v528 = _t49;
				_v724 = 0x10001;
				_v544 =  *((intOrPtr*)(_t49 - 4));
				_v804 = _a8;
				_v800 = _a12;
				_v792 = _v0;
				_t66 = IsDebuggerPresent();
				SetUnhandledExceptionFilter(0);
				_t57 = UnhandledExceptionFilter( &_v812);
				if(_t57 == 0 && _t66 == 0 && _a4 != 0xffffffff) {
					_push(_a4);
					_t57 = E0068AA40(_t57);
				}
				E0068975C();
				return _t57;
			}

0x00693d4b
0x00693d4b
0x00693d4b
0x00693d4e
0x00693d56
0x00693d5b
0x00693d5d
0x00693d64
0x00693d65
0x00693d67
0x00693d6a
0x00693d6f
0x00693d6f
0x00693d7b
0x00693d8e
0x00693d9c
0x00693da2
0x00693da8
0x00693dae
0x00693db4
0x00693dba
0x00693dc0
0x00693dc6
0x00693dcc
0x00693dd2
0x00693dd9
0x00693de0
0x00693de7
0x00693dee
0x00693df5
0x00693dfc
0x00693dfd
0x00693e06
0x00693e0c
0x00693e0f
0x00693e15
0x00693e22
0x00693e2b
0x00693e34
0x00693e3d
0x00693e4b
0x00693e4d
0x00693e5a
0x00693e62
0x00693e6e
0x00693e71
0x00693e76
0x00693e7d
0x00693e85

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 00693E43
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 00693E4D
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,00000000), ref: 00693E5A

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: ca0ea3f5aba32525cd46cfd484b390a4b3f65f3be555cef48d60eb2d5f7c2c8e
Instruction ID: bcacaa1cbb463d079c0b1b81d34ef912da6de7b3939916b554b883fb95602418
Opcode Fuzzy Hash: ca0ea3f5aba32525cd46cfd484b390a4b3f65f3be555cef48d60eb2d5f7c2c8e
Instruction Fuzzy Hash: 1C31D5749012299BCB61DF64DC897DDBBB9BF08310F5042DAE40CA6251EB749B858F49

Uniqueness

Uniqueness Score: -1.00%

Function 006A3B7C Relevance: 4.5, APIs: 3, Instructions: 20
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E006A3B7C(int _a4) {
				void* _t14;

				if(E006AAFD6(_t14) != 0 && ( *( *[fs:0x30] + 0x68) >> 0x00000008 & 0x00000001) == 0) {
					TerminateProcess(GetCurrentProcess(), _a4);
				}
				E006A3BBD(_t14, _a4);
				ExitProcess(_a4);
			}

0x006a3b88
0x006a3ba4
0x006a3ba4
0x006a3bad
0x006a3bb6

APIs

GetCurrentProcess.KERNEL32(00000003,?,006A3B52,00000003,00787AE8,0000000C,006A3C65,00000003,00000002,00000000,?,0069FAEB,00000003), ref: 006A3B9D
TerminateProcess.KERNEL32(00000000,?,006A3B52,00000003,00787AE8,0000000C,006A3C65,00000003,00000002,00000000,?,0069FAEB,00000003), ref: 006A3BA4
ExitProcess.KERNEL32 ref: 006A3BB6

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 8de57bdf8283979fddd2e60bdd0762b2385510041d5dea3dd67d11564de05a27
Instruction ID: 90d38b754362d624cb20a433c72edaa87549d1ec43a03f564e1a8e13fa4a7de9
Opcode Fuzzy Hash: 8de57bdf8283979fddd2e60bdd0762b2385510041d5dea3dd67d11564de05a27
Instruction Fuzzy Hash: 19E0BF31410658AFDF517F94DD89E883B6BEB61341B004014F8055E221CB75DD92DF60

Uniqueness

Uniqueness Score: -1.00%

Function 006B285D Relevance: 24.6, APIs: 13, Strings: 1, Instructions: 114
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E006B285D(intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _t25;
				intOrPtr* _t26;
				intOrPtr _t28;
				intOrPtr* _t29;
				intOrPtr* _t31;
				intOrPtr* _t45;
				intOrPtr* _t46;
				intOrPtr* _t47;
				intOrPtr* _t55;
				intOrPtr* _t70;
				intOrPtr _t74;

				_t74 = _a4;
				_t25 =  *((intOrPtr*)(_t74 + 0x88));
				if(_t25 != 0 && _t25 != 0x78ecf8) {
					_t45 =  *((intOrPtr*)(_t74 + 0x7c));
					if(_t45 != 0 &&  *_t45 == 0) {
						_t46 =  *((intOrPtr*)(_t74 + 0x84));
						if(_t46 != 0 &&  *_t46 == 0) {
							E0069FA6F(_t46);
							E006B1BFB( *((intOrPtr*)(_t74 + 0x88)));
						}
						_t47 =  *((intOrPtr*)(_t74 + 0x80));
						if(_t47 != 0 &&  *_t47 == 0) {
							E0069FA6F(_t47);
							E006B20B5( *((intOrPtr*)(_t74 + 0x88)));
						}
						E0069FA6F( *((intOrPtr*)(_t74 + 0x7c)));
						E0069FA6F( *((intOrPtr*)(_t74 + 0x88)));
					}
				}
				_t26 =  *((intOrPtr*)(_t74 + 0x8c));
				if(_t26 != 0 &&  *_t26 == 0) {
					E0069FA6F( *((intOrPtr*)(_t74 + 0x90)) - 0xfe);
					E0069FA6F( *((intOrPtr*)(_t74 + 0x94)) - 0x80);
					E0069FA6F( *((intOrPtr*)(_t74 + 0x98)) - 0x80);
					E0069FA6F( *((intOrPtr*)(_t74 + 0x8c)));
				}
				E006B29D0( *((intOrPtr*)(_t74 + 0x9c)));
				_t28 = 6;
				_t55 = _t74 + 0xa0;
				_v8 = _t28;
				_t70 = _t74 + 0x28;
				do {
					if( *((intOrPtr*)(_t70 - 8)) != 0x78ef40) {
						_t31 =  *_t70;
						if(_t31 != 0 &&  *_t31 == 0) {
							E0069FA6F(_t31);
							E0069FA6F( *_t55);
						}
						_t28 = _v8;
					}
					if( *((intOrPtr*)(_t70 - 0xc)) != 0) {
						_t29 =  *((intOrPtr*)(_t70 - 4));
						if(_t29 != 0 &&  *_t29 == 0) {
							E0069FA6F(_t29);
						}
						_t28 = _v8;
					}
					_t55 = _t55 + 4;
					_t70 = _t70 + 0x10;
					_t28 = _t28 - 1;
					_v8 = _t28;
				} while (_t28 != 0);
				return E0069FA6F(_t74);
			}

0x006b2865
0x006b2869
0x006b2871
0x006b287a
0x006b287f
0x006b2886
0x006b288e
0x006b2896
0x006b28a1
0x006b28a7
0x006b28a8
0x006b28b0
0x006b28b8
0x006b28c3
0x006b28c9
0x006b28cd
0x006b28d8
0x006b28de
0x006b287f
0x006b28df
0x006b28e7
0x006b28fa
0x006b290d
0x006b291b
0x006b2926
0x006b292b
0x006b2934
0x006b293c
0x006b293d
0x006b2943
0x006b2946
0x006b2949
0x006b2950
0x006b2952
0x006b2956
0x006b295e
0x006b2965
0x006b296b
0x006b296c
0x006b296c
0x006b2973
0x006b2975
0x006b297a
0x006b2982
0x006b2987
0x006b2988
0x006b2988
0x006b298b
0x006b298e
0x006b2991
0x006b2994
0x006b2994
0x006b29a6

APIs

___free_lconv_mon.LIBCMT ref: 006B28A1

Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1C18
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1C2A
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1C3C
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1C4E
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1C60
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1C72
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1C84
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1C96
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1CA8
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1CBA
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1CCC
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1CDE
Part of subcall function 006B1BFB: _free.LIBCMT ref: 006B1CF0

_free.LIBCMT ref: 006B2896

Part of subcall function 0069FA6F: RtlFreeHeap.NTDLL(00000000,00000000,?,006B2368,?,00000000,?,00000000,?,006B260C,?,00000007,?,?,006B29F5,?), ref: 0069FA85
Part of subcall function 0069FA6F: GetLastError.KERNEL32(?,?,006B2368,?,00000000,?,00000000,?,006B260C,?,00000007,?,?,006B29F5,?,?), ref: 0069FA97

_free.LIBCMT ref: 006B28B8
_free.LIBCMT ref: 006B28CD
_free.LIBCMT ref: 006B28D8
_free.LIBCMT ref: 006B28FA
_free.LIBCMT ref: 006B290D
_free.LIBCMT ref: 006B291B
_free.LIBCMT ref: 006B2926
_free.LIBCMT ref: 006B295E
_free.LIBCMT ref: 006B2965
_free.LIBCMT ref: 006B2982
_free.LIBCMT ref: 006B299A

Strings

@x, xrefs: 006B2949

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID: @x
API String ID: 161543041-3514461932
Opcode ID: 740e03a277fbd64bf6999b416c48f14fe3109fde084c14b6e21bd59228d4e283
Instruction ID: 5c8c4247a5c6b0554600f68dd1dd8023980dc3cc8731e339c854b412f71860d2
Opcode Fuzzy Hash: 740e03a277fbd64bf6999b416c48f14fe3109fde084c14b6e21bd59228d4e283
Instruction Fuzzy Hash: 55315AB1600206DFEB61AB39D855BD6B3EAAF00350F15442EF45DDB691EF30ADC48724

Uniqueness

Uniqueness Score: -1.00%

Function 006A7877 Relevance: 10.7, APIs: 7, Instructions: 152
fileCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 77%

			E006A7877(void* __fp0, intOrPtr* _a4, signed int _a8, signed char* _a12, intOrPtr _a16) {
				signed int _v8;
				signed char _v15;
				char _v16;
				void _v24;
				short _v28;
				char _v31;
				void _v32;
				long _v36;
				intOrPtr _v40;
				void* _v44;
				signed int _v48;
				signed char* _v52;
				long _v56;
				int _v60;
				void* __ebx;
				signed int _t78;
				signed int _t80;
				int _t86;
				void* _t93;
				long _t96;
				void _t104;
				void* _t111;
				signed int _t115;
				signed int _t118;
				signed char _t123;
				signed char _t128;
				intOrPtr _t129;
				signed int _t131;
				signed char* _t133;
				intOrPtr* _t136;
				signed int _t138;
				void* _t139;
				void* _t152;

				_t152 = __fp0;
				_t78 =  *0x78ebd8; // 0x74f54c6e
				_v8 = _t78 ^ _t138;
				_t80 = _a8;
				_t118 = _t80 >> 6;
				_t115 = (_t80 & 0x0000003f) * 0x30;
				_t133 = _a12;
				_v52 = _t133;
				_v48 = _t118;
				_v44 =  *((intOrPtr*)( *((intOrPtr*)(0x79fc80 + _t118 * 4)) + _t115 + 0x18));
				_v40 = _a16 + _t133;
				_t86 = GetConsoleCP();
				_t136 = _a4;
				_v60 = _t86;
				 *_t136 = 0;
				 *((intOrPtr*)(_t136 + 4)) = 0;
				 *((intOrPtr*)(_t136 + 8)) = 0;
				while(_t133 < _v40) {
					_v28 = 0;
					_v31 =  *_t133;
					_t129 =  *((intOrPtr*)(0x79fc80 + _v48 * 4));
					_t123 =  *(_t129 + _t115 + 0x2d);
					if((_t123 & 0x00000004) == 0) {
						if(( *(E006A083E(_t115, _t129, _t152) + ( *_t133 & 0x000000ff) * 2) & 0x00008000) == 0) {
							_push(1);
							_push(_t133);
							goto L8;
						} else {
							if(_t133 >= _v40) {
								_t131 = _v48;
								 *((char*)( *((intOrPtr*)(0x79fc80 + _t131 * 4)) + _t115 + 0x2e)) =  *_t133;
								 *( *((intOrPtr*)(0x79fc80 + _t131 * 4)) + _t115 + 0x2d) =  *( *((intOrPtr*)(0x79fc80 + _t131 * 4)) + _t115 + 0x2d) | 0x00000004;
								 *((intOrPtr*)(_t136 + 4)) =  *((intOrPtr*)(_t136 + 4)) + 1;
							} else {
								_t111 = E006A94D2( &_v28, _t133, 2);
								_t139 = _t139 + 0xc;
								if(_t111 != 0xffffffff) {
									_t133 =  &(_t133[1]);
									goto L9;
								}
							}
						}
					} else {
						_t128 = _t123 & 0x000000fb;
						_v16 =  *((intOrPtr*)(_t129 + _t115 + 0x2e));
						_push(2);
						_v15 = _t128;
						 *(_t129 + _t115 + 0x2d) = _t128;
						_push( &_v16);
						L8:
						_push( &_v28);
						_t93 = E006A94D2();
						_t139 = _t139 + 0xc;
						if(_t93 != 0xffffffff) {
							L9:
							_t133 =  &(_t133[1]);
							_t96 = WideCharToMultiByte(_v60, 0,  &_v28, 1,  &_v24, 5, 0, 0);
							_v56 = _t96;
							if(_t96 != 0) {
								if(WriteFile(_v44,  &_v24, _t96,  &_v36, 0) == 0) {
									L19:
									 *_t136 = GetLastError();
								} else {
									 *((intOrPtr*)(_t136 + 4)) =  *((intOrPtr*)(_t136 + 8)) - _v52 + _t133;
									if(_v36 >= _v56) {
										if(_v31 != 0xa) {
											goto L16;
										} else {
											_t104 = 0xd;
											_v32 = _t104;
											if(WriteFile(_v44,  &_v32, 1,  &_v36, 0) == 0) {
												goto L19;
											} else {
												if(_v36 >= 1) {
													 *((intOrPtr*)(_t136 + 8)) =  *((intOrPtr*)(_t136 + 8)) + 1;
													 *((intOrPtr*)(_t136 + 4)) =  *((intOrPtr*)(_t136 + 4)) + 1;
													goto L16;
												}
											}
										}
									}
								}
							}
						}
					}
					goto L20;
					L16:
				}
				L20:
				E0068975C();
				return _t136;
			}

0x006a7877
0x006a787f
0x006a7886
0x006a7889
0x006a7891
0x006a7895
0x006a78a1
0x006a78a4
0x006a78a7
0x006a78ae
0x006a78b6
0x006a78b9
0x006a78bf
0x006a78c5
0x006a78ca
0x006a78cc
0x006a78cf
0x006a78d4
0x006a78de
0x006a78e5
0x006a78e8
0x006a78ef
0x006a78f6
0x006a7922
0x006a7948
0x006a794a
0x00000000
0x006a7924
0x006a7927
0x006a79ee
0x006a79fa
0x006a7a05
0x006a7a0a
0x006a792d
0x006a7934
0x006a7939
0x006a793f
0x006a7945
0x00000000
0x006a7945
0x006a793f
0x006a7927
0x006a78f8
0x006a78fc
0x006a78ff
0x006a7905
0x006a7907
0x006a790a
0x006a790e
0x006a794b
0x006a794e
0x006a794f
0x006a7954
0x006a795a
0x006a7960
0x006a796f
0x006a7975
0x006a797b
0x006a7980
0x006a799c
0x006a7a0f
0x006a7a15
0x006a799e
0x006a79a6
0x006a79af
0x006a79b5
0x00000000
0x006a79b7
0x006a79b9
0x006a79bc
0x006a79d5
0x00000000
0x006a79d7
0x006a79db
0x006a79dd
0x006a79e0
0x00000000
0x006a79e0
0x006a79db
0x006a79d5
0x006a79b5
0x006a79af
0x006a799c
0x006a7980
0x006a795a
0x00000000
0x006a79e3
0x006a79e3
0x006a7a17
0x006a7a21
0x006a7a29

APIs

GetConsoleCP.KERNEL32(00000000,?,?,?,?,?,?,?,?,006A7FEC,00000003,?,00000000,?,00000003,0000000C), ref: 006A78B9
__fassign.LIBCMT ref: 006A7934
__fassign.LIBCMT ref: 006A794F
WideCharToMultiByte.KERNEL32(?,00000000,?,00000001,00000000,00000005,00000000,00000000), ref: 006A7975
WriteFile.KERNEL32(?,00000000,00000000,006A7FEC,00000000,?,?,?,?,?,?,?,?,?,006A7FEC,00000003), ref: 006A7994
WriteFile.KERNEL32(?,00000003,00000001,006A7FEC,00000000,?,?,?,?,?,?,?,?,?,006A7FEC,00000003), ref: 006A79CD

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: 324a59f9c48fd21af5bffd55c6eedb57c0e6ca58ed614219e7615a7907dabada
Instruction ID: ec3523dd789292462bb20edfd69580fb79e339fbf8074911127554242baa9858
Opcode Fuzzy Hash: 324a59f9c48fd21af5bffd55c6eedb57c0e6ca58ed614219e7615a7907dabada
Instruction Fuzzy Hash: FD51C370A04249AFDB10DFA8DC85AEEBBFAEF0A300F14455AE951E7251E7309E41CF64

Uniqueness

Uniqueness Score: -1.00%

Function 006B25F3 Relevance: 10.6, APIs: 7, Instructions: 65
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E006B25F3(intOrPtr _a4) {
				void* _t18;

				_t45 = _a4;
				if(_a4 != 0) {
					E006B233A(_t45, 7);
					E006B233A(_t45 + 0x1c, 7);
					E006B233A(_t45 + 0x38, 0xc);
					E006B233A(_t45 + 0x68, 0xc);
					E006B233A(_t45 + 0x98, 2);
					E0069FA6F( *((intOrPtr*)(_t45 + 0xa0)));
					E0069FA6F( *((intOrPtr*)(_t45 + 0xa4)));
					E0069FA6F( *((intOrPtr*)(_t45 + 0xa8)));
					E006B233A(_t45 + 0xb4, 7);
					E006B233A(_t45 + 0xd0, 7);
					E006B233A(_t45 + 0xec, 0xc);
					E006B233A(_t45 + 0x11c, 0xc);
					E006B233A(_t45 + 0x14c, 2);
					E0069FA6F( *((intOrPtr*)(_t45 + 0x154)));
					E0069FA6F( *((intOrPtr*)(_t45 + 0x158)));
					E0069FA6F( *((intOrPtr*)(_t45 + 0x15c)));
					return E0069FA6F( *((intOrPtr*)(_t45 + 0x160)));
				}
				return _t18;
			}

0x006b25f9
0x006b25fe
0x006b2607
0x006b2612
0x006b261d
0x006b2628
0x006b2636
0x006b2641
0x006b264c
0x006b2657
0x006b2665
0x006b2673
0x006b2684
0x006b2692
0x006b26a0
0x006b26ab
0x006b26b6
0x006b26c1
0x00000000
0x006b26d1
0x006b26d6

APIs

Part of subcall function 006B233A: _free.LIBCMT ref: 006B2363

_free.LIBCMT ref: 006B2641

Part of subcall function 0069FA6F: RtlFreeHeap.NTDLL(00000000,00000000,?,006B2368,?,00000000,?,00000000,?,006B260C,?,00000007,?,?,006B29F5,?), ref: 0069FA85
Part of subcall function 0069FA6F: GetLastError.KERNEL32(?,?,006B2368,?,00000000,?,00000000,?,006B260C,?,00000007,?,?,006B29F5,?,?), ref: 0069FA97

_free.LIBCMT ref: 006B264C
_free.LIBCMT ref: 006B2657
_free.LIBCMT ref: 006B26AB
_free.LIBCMT ref: 006B26B6
_free.LIBCMT ref: 006B26C1
_free.LIBCMT ref: 006B26CC

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: d62b0b488f8df72999331d71d6866e55f6b8d029ee353ee2502b9534cc94109f
Instruction ID: 58d0dbdc646b1db73acc9ac58c0fc81323fb6f519680fec950a53abb00cbee82
Opcode Fuzzy Hash: d62b0b488f8df72999331d71d6866e55f6b8d029ee353ee2502b9534cc94109f
Instruction Fuzzy Hash: 191151B2540B04EAD9B0F7B0CC07FCB77DE7F00704F40482DB69DAA452EA69BA444754

Uniqueness

Uniqueness Score: -1.00%

Function 006A922F Relevance: 9.0, APIs: 6, Instructions: 50
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 74%

			E006A922F(void* __ebx, void* __ecx, void* __edx, void* __fp0) {
				void* __esi;
				intOrPtr _t2;
				void* _t3;
				void* _t4;
				intOrPtr _t9;
				void* _t11;
				void* _t20;
				void* _t21;
				void* _t23;
				void* _t25;
				void* _t27;
				void* _t29;
				void* _t31;
				void* _t32;
				long _t36;
				long _t37;
				void* _t40;
				void* _t48;

				_t48 = __fp0;
				_t29 = __edx;
				_t23 = __ecx;
				_t20 = __ebx;
				_t36 = GetLastError();
				_t2 =  *0x78ee78; // 0x2
				_t42 = _t2 - 0xffffffff;
				if(_t2 == 0xffffffff) {
					L2:
					_t3 = E0069FA12(_t23, 1, 0x364);
					_t31 = _t3;
					_pop(_t25);
					if(_t31 != 0) {
						_t4 = E006AA89A(_t25, __eflags,  *0x78ee78, _t31);
						__eflags = _t4;
						if(_t4 != 0) {
							E006A90A1(_t25, _t31, 0x79fc70);
							E0069FA6F(0);
							_t40 = _t40 + 0xc;
							__eflags = _t31;
							if(_t31 == 0) {
								goto L9;
							} else {
								goto L8;
							}
						} else {
							_push(_t31);
							goto L4;
						}
					} else {
						_push(_t3);
						L4:
						E0069FA6F();
						_pop(_t25);
						L9:
						SetLastError(_t36);
						E0069FAA9(_t20, _t29, _t36, _t48);
						asm("int3");
						_push(_t20);
						_push(_t36);
						_push(_t31);
						_t37 = GetLastError();
						_t21 = 0;
						_t9 =  *0x78ee78; // 0x2
						_t45 = _t9 - 0xffffffff;
						if(_t9 == 0xffffffff) {
							L12:
							_t32 = E0069FA12(_t25, 1, 0x364);
							_pop(_t27);
							if(_t32 != 0) {
								_t11 = E006AA89A(_t27, __eflags,  *0x78ee78, _t32);
								__eflags = _t11;
								if(_t11 != 0) {
									E006A90A1(_t27, _t32, 0x79fc70);
									E0069FA6F(_t21);
									__eflags = _t32;
									if(_t32 != 0) {
										goto L19;
									} else {
										goto L18;
									}
								} else {
									_push(_t32);
									goto L14;
								}
							} else {
								_push(_t21);
								L14:
								E0069FA6F();
								L18:
								SetLastError(_t37);
							}
						} else {
							_t32 = E006AA844(_t25, _t45, _t9);
							if(_t32 != 0) {
								L19:
								SetLastError(_t37);
								_t21 = _t32;
							} else {
								goto L12;
							}
						}
						return _t21;
					}
				} else {
					_t31 = E006AA844(_t23, _t42, _t2);
					if(_t31 != 0) {
						L8:
						SetLastError(_t36);
						return _t31;
					} else {
						goto L2;
					}
				}
			}

0x006a922f
0x006a922f
0x006a922f
0x006a922f
0x006a9239
0x006a923b
0x006a9240
0x006a9243
0x006a9251
0x006a9258
0x006a925d
0x006a9260
0x006a9263
0x006a9275
0x006a927a
0x006a927c
0x006a9287
0x006a928e
0x006a9293
0x006a9296
0x006a9298
0x00000000
0x00000000
0x00000000
0x00000000
0x006a927e
0x006a927e
0x00000000
0x006a927e
0x006a9265
0x006a9265
0x006a9266
0x006a9266
0x006a926b
0x006a92a6
0x006a92a7
0x006a92ad
0x006a92b2
0x006a92b5
0x006a92b6
0x006a92b7
0x006a92be
0x006a92c0
0x006a92c2
0x006a92c7
0x006a92ca
0x006a92d8
0x006a92e4
0x006a92e7
0x006a92ea
0x006a92fc
0x006a9301
0x006a9303
0x006a930e
0x006a9314
0x006a931c
0x006a931e
0x00000000
0x00000000
0x00000000
0x00000000
0x006a9305
0x006a9305
0x00000000
0x006a9305
0x006a92ec
0x006a92ec
0x006a92ed
0x006a92ed
0x006a9320
0x006a9321
0x006a9321
0x006a92cc
0x006a92d2
0x006a92d6
0x006a9329
0x006a932a
0x006a9330
0x00000000
0x00000000
0x00000000
0x006a92d6
0x006a9337
0x006a9337
0x006a9245
0x006a924b
0x006a924f
0x006a929a
0x006a929b
0x006a92a5
0x00000000
0x00000000
0x00000000
0x006a924f

APIs

GetLastError.KERNEL32(?,?,00694019,007877E0,00000010), ref: 006A9233
_free.LIBCMT ref: 006A9266
_free.LIBCMT ref: 006A928E
SetLastError.KERNEL32(00000000), ref: 006A929B
SetLastError.KERNEL32(00000000), ref: 006A92A7
_abort.LIBCMT ref: 006A92AD

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: 6eea569136bc2b5b879c83e3084a4430b7b65df70fe3dd1f741b00b36fa65d47
Instruction ID: b61bc8e5c7182402c832b48634ead03dd3e01138595a4d1cb6d96bf2fc8ec2f6
Opcode Fuzzy Hash: 6eea569136bc2b5b879c83e3084a4430b7b65df70fe3dd1f741b00b36fa65d47
Instruction Fuzzy Hash: 09F0F432554600B6EF623339AC4AF5A325F8BC3770B350139F908E6691EF68CE428939

Uniqueness

Uniqueness Score: -1.00%

Function 006A3BBD Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 37%

			E006A3BBD(void* __ecx, intOrPtr _a4) {
				signed int _v8;
				signed int _v12;
				signed int _t10;
				int _t12;
				int _t19;
				signed int _t21;

				_t10 =  *0x78ebd8; // 0x74f54c6e
				_v8 = _t10 ^ _t21;
				_v12 = _v12 & 0x00000000;
				_t12 =  &_v12;
				__imp__GetModuleHandleExW(0, L"mscoree.dll", _t12, __ecx, __ecx);
				if(_t12 != 0) {
					_t12 = GetProcAddress(_v12, "CorExitProcess");
					_t19 = _t12;
					if(_t19 != 0) {
						 *0x6e03d8(_a4);
						_t12 =  *_t19();
					}
				}
				if(_v12 != 0) {
					_t12 = FreeLibrary(_v12);
				}
				E0068975C();
				return _t12;
			}

0x006a3bc4
0x006a3bcb
0x006a3bce
0x006a3bd2
0x006a3bdd
0x006a3be5
0x006a3bf0
0x006a3bf6
0x006a3bfa
0x006a3c01
0x006a3c07
0x006a3c07
0x006a3c09
0x006a3c0e
0x006a3c13
0x006a3c13
0x006a3c1e
0x006a3c26

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,006A3BB2,00000003,?,006A3B52,00000003,00787AE8,0000000C,006A3C65,00000003,00000002), ref: 006A3BDD
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 006A3BF0
FreeLibrary.KERNEL32(00000000,?,?,?,006A3BB2,00000003,?,006A3B52,00000003,00787AE8,0000000C,006A3C65,00000003,00000002,00000000), ref: 006A3C13

Strings

CorExitProcess, xrefs: 006A3BE8
mscoree.dll, xrefs: 006A3BD6

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 7e76eb6007c895bcd190805d269cbeac5050ddd3093d7a3e14bf7aee9145a4e1
Instruction ID: 3e6177fbbe806c719c09f76848078770a19c301e12a965abf75a2ede46cd734a
Opcode Fuzzy Hash: 7e76eb6007c895bcd190805d269cbeac5050ddd3093d7a3e14bf7aee9145a4e1
Instruction Fuzzy Hash: C3F04474A00359FBDB116F94DC49BDDBFB6EF45751F040064F806A6290DB755E80CB94

Uniqueness

Uniqueness Score: -1.00%

Function 006A92B3 Relevance: 7.6, APIs: 5, Instructions: 53
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 81%

			E006A92B3(void* __ecx) {
				intOrPtr _t2;
				void* _t4;
				void* _t10;
				void* _t11;
				void* _t13;
				void* _t15;
				long _t16;

				_t11 = __ecx;
				_t16 = GetLastError();
				_t10 = 0;
				_t2 =  *0x78ee78; // 0x2
				_t19 = _t2 - 0xffffffff;
				if(_t2 == 0xffffffff) {
					L2:
					_t15 = E0069FA12(_t11, 1, 0x364);
					_pop(_t13);
					if(_t15 != 0) {
						_t4 = E006AA89A(_t13, __eflags,  *0x78ee78, _t15);
						__eflags = _t4;
						if(_t4 != 0) {
							E006A90A1(_t13, _t15, 0x79fc70);
							E0069FA6F(_t10);
							__eflags = _t15;
							if(_t15 != 0) {
								goto L9;
							} else {
								goto L8;
							}
						} else {
							_push(_t15);
							goto L4;
						}
					} else {
						_push(_t10);
						L4:
						E0069FA6F();
						L8:
						SetLastError(_t16);
					}
				} else {
					_t15 = E006AA844(_t11, _t19, _t2);
					if(_t15 != 0) {
						L9:
						SetLastError(_t16);
						_t10 = _t15;
					} else {
						goto L2;
					}
				}
				return _t10;
			}

0x006a92b3
0x006a92be
0x006a92c0
0x006a92c2
0x006a92c7
0x006a92ca
0x006a92d8
0x006a92e4
0x006a92e7
0x006a92ea
0x006a92fc
0x006a9301
0x006a9303
0x006a930e
0x006a9314
0x006a931c
0x006a931e
0x00000000
0x00000000
0x00000000
0x00000000
0x006a9305
0x006a9305
0x00000000
0x006a9305
0x006a92ec
0x006a92ec
0x006a92ed
0x006a92ed
0x006a9320
0x006a9321
0x006a9321
0x006a92cc
0x006a92d2
0x006a92d6
0x006a9329
0x006a932a
0x006a9330
0x00000000
0x00000000
0x00000000
0x006a92d6
0x006a9337

APIs

GetLastError.KERNEL32(?,?,?,0069B422,0069FA64,?,006A925D,00000001,00000364,?,00694019,007877E0,00000010), ref: 006A92B8
_free.LIBCMT ref: 006A92ED
_free.LIBCMT ref: 006A9314
SetLastError.KERNEL32(00000000), ref: 006A9321
SetLastError.KERNEL32(00000000), ref: 006A932A

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: 6bd75bf44986cd5d88aa059051f706d341850c93f5cbb3a07a32d4e1af206694
Instruction ID: 25cf4b2a09143d9fad7afe7aae943de7f1ffddab2982c8ff1d61d246c7dd7f34
Opcode Fuzzy Hash: 6bd75bf44986cd5d88aa059051f706d341850c93f5cbb3a07a32d4e1af206694
Instruction Fuzzy Hash: 5601F436280600ABAB1273346D85EAB366FDBE37707350139F405D62C1FFB88D428978

Uniqueness

Uniqueness Score: -1.00%

Function 006B20B5 Relevance: 7.5, APIs: 5, Instructions: 40
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E006B20B5(intOrPtr* _a4) {
				intOrPtr _t6;
				intOrPtr* _t21;
				void* _t23;
				void* _t24;
				void* _t25;
				void* _t26;
				void* _t27;

				_t21 = _a4;
				if(_t21 != 0) {
					_t23 =  *_t21 -  *0x78ecf8; // 0x78ecf0
					if(_t23 != 0) {
						E0069FA6F(_t7);
					}
					_t24 =  *((intOrPtr*)(_t21 + 4)) -  *0x78ecfc; // 0x79f9c4
					if(_t24 != 0) {
						E0069FA6F(_t8);
					}
					_t25 =  *((intOrPtr*)(_t21 + 8)) -  *0x78ed00; // 0x79f9c4
					if(_t25 != 0) {
						E0069FA6F(_t9);
					}
					_t26 =  *((intOrPtr*)(_t21 + 0x30)) -  *0x78ed28; // 0x78ecf4
					if(_t26 != 0) {
						E0069FA6F(_t10);
					}
					_t6 =  *((intOrPtr*)(_t21 + 0x34));
					_t27 = _t6 -  *0x78ed2c; // 0x79f9c8
					if(_t27 != 0) {
						return E0069FA6F(_t6);
					}
				}
				return _t6;
			}

0x006b20bb
0x006b20c0
0x006b20c4
0x006b20ca
0x006b20cd
0x006b20d2
0x006b20d6
0x006b20dc
0x006b20df
0x006b20e4
0x006b20e8
0x006b20ee
0x006b20f1
0x006b20f6
0x006b20fa
0x006b2100
0x006b2103
0x006b2108
0x006b2109
0x006b210c
0x006b2112
0x00000000
0x006b211a
0x006b2112
0x006b211d

APIs

_free.LIBCMT ref: 006B20CD

Part of subcall function 0069FA6F: RtlFreeHeap.NTDLL(00000000,00000000,?,006B2368,?,00000000,?,00000000,?,006B260C,?,00000007,?,?,006B29F5,?), ref: 0069FA85
Part of subcall function 0069FA6F: GetLastError.KERNEL32(?,?,006B2368,?,00000000,?,00000000,?,006B260C,?,00000007,?,?,006B29F5,?,?), ref: 0069FA97

_free.LIBCMT ref: 006B20DF
_free.LIBCMT ref: 006B20F1
_free.LIBCMT ref: 006B2103
_free.LIBCMT ref: 006B2115

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 4b70ff674f4a3b1d47c261e1035af1de5e1d2798e9bbe1c71482013c2b050243
Instruction ID: 3954b25e726d5eb6b89660db731eddb62bb19e65691ad1dc78e45f5167c54e77
Opcode Fuzzy Hash: 4b70ff674f4a3b1d47c261e1035af1de5e1d2798e9bbe1c71482013c2b050243
Instruction Fuzzy Hash: 1BF09072550211AB8A60EB6CF896C9A73EFAA04B107658C09F508D7A00DB34FDC08B6C

Uniqueness

Uniqueness Score: -1.00%

Function 00694071 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 21
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00694071(char _a4) {
				void* _t6;
				intOrPtr _t11;

				_t1 =  &_a4; // 0x694141
				_t11 =  *_t1;
				if(_t11 != 0) {
					if( *(_t11 + 8) != 0) {
						CloseHandle( *(_t11 + 8));
					}
					if( *(_t11 + 0xc) != 0) {
						FreeLibrary( *(_t11 + 0xc));
					}
					return E0069FA6F(_t11);
				}
				return _t6;
			}

0x00694077
0x00694077
0x0069407c
0x00694082
0x00694087
0x00694087
0x00694091
0x00694096
0x00694096
0x00000000
0x006940a2
0x006940a5

APIs

CloseHandle.KERNEL32(00000000,00000000,?,00694141,00000000), ref: 00694087
FreeLibrary.KERNEL32(00000000,00000000,?,00694141,00000000), ref: 00694096
_free.LIBCMT ref: 0069409D

Strings

AAi, xrefs: 00694077, 0069409C

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: CloseFreeHandleLibrary_free
String ID: AAi
API String ID: 621396759-1393924445
Opcode ID: 177d726caeb10c2ef62d6b82d0164b6ef32b2aeb708172910c1f3727add98244
Instruction ID: 753d14c54d9d78176b86710963db4eaf54b52b45d5cec74050cdd1b7330cd0df
Opcode Fuzzy Hash: 177d726caeb10c2ef62d6b82d0164b6ef32b2aeb708172910c1f3727add98244
Instruction Fuzzy Hash: 5AE08C32400710EFDB316B55E80CF9BBBAEEF40721F14C029F61956A60CB76AC82CB94

Uniqueness

Uniqueness Score: -1.00%

Function 006AA5EE Relevance: 6.1, APIs: 4, Instructions: 52
libraryCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 95%

			E006AA5EE(signed int _a4) {
				signed int _t9;
				void* _t13;
				signed int _t15;
				WCHAR* _t22;
				signed int _t24;
				signed int* _t25;
				void* _t27;

				_t9 = _a4;
				_t25 = 0x79fe88 + _t9 * 4;
				_t24 =  *_t25;
				if(_t24 == 0) {
					_t22 =  *(0x71f018 + _t9 * 4);
					_t27 = LoadLibraryExW(_t22, 0, 0x800);
					if(_t27 != 0) {
						L8:
						 *_t25 = _t27;
						if( *_t25 != 0) {
							FreeLibrary(_t27);
						}
						_t13 = _t27;
						L11:
						return _t13;
					}
					_t15 = GetLastError();
					if(_t15 != 0x57) {
						_t27 = 0;
					} else {
						_t15 = LoadLibraryExW(_t22, _t27, _t27);
						_t27 = _t15;
					}
					if(_t27 != 0) {
						goto L8;
					} else {
						 *_t25 = _t15 | 0xffffffff;
						_t13 = 0;
						goto L11;
					}
				}
				_t4 = _t24 + 1; // 0x74f54c6f
				asm("sbb eax, eax");
				return  ~_t4 & _t24;
			}

0x006aa5f3
0x006aa5f7
0x006aa5fe
0x006aa602
0x006aa610
0x006aa626
0x006aa62a
0x006aa653
0x006aa655
0x006aa659
0x006aa65c
0x006aa65c
0x006aa662
0x006aa664
0x00000000
0x006aa665
0x006aa62c
0x006aa635
0x006aa644
0x006aa637
0x006aa63a
0x006aa640
0x006aa640
0x006aa648
0x00000000
0x006aa64a
0x006aa64d
0x006aa64f
0x00000000
0x006aa64f
0x006aa648
0x006aa604
0x006aa609
0x00000000

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00000000,00000000,?,006AA595,?,00000000,00000000,00000000,?,006AA8C1,00000006,FlsSetValue), ref: 006AA620
GetLastError.KERNEL32(?,006AA595,?,00000000,00000000,00000000,?,006AA8C1,00000006,FlsSetValue,0071F508,0071F510,00000000,00000364,?,006A9301), ref: 006AA62C
LoadLibraryExW.KERNEL32(00000000,00000000,00000000,?,006AA595,?,00000000,00000000,00000000,?,006AA8C1,00000006,FlsSetValue,0071F508,0071F510,00000000), ref: 006AA63A

Memory Dump Source

Source File: 00000000.00000002.570207224.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.570193627.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.573934518.00000000006E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574473997.000000000078C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574489805.000000000078D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574498488.000000000078E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574689931.0000000000791000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574716473.000000000079D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574731214.00000000007A6000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.574747500.00000000007A9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_y8uLBHoe4J.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID:
API String ID: 3177248105-0
Opcode ID: b98b3aa79ad92ea2b5c056304a13764660b1b0c260649513773df66e871bf363
Instruction ID: ad7dd38d63d071ddb964e8a43bb3b65ca113db104cb148e5c65d5cf7231e80da
Opcode Fuzzy Hash: b98b3aa79ad92ea2b5c056304a13764660b1b0c260649513773df66e871bf363
Instruction Fuzzy Hash: F201FC36601323ABD7219BA8AC44D96779AAF06BB07145121F905D7340D724DD41CEE5

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: dllhost.exePID: 5608, Parent PID: 7076COMMON

Execution Graph

Execution Coverage:	0.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1917
Total number of Limit Nodes:	0

Executed Functions

Function 6E2E4D60 Relevance: 19.6, APIs: 13, Instructions: 130
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 31%

			E6E2E4D60(void* __ebp, intOrPtr _a8, intOrPtr _a12) {
				intOrPtr _v24;
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr _t30;
				intOrPtr _t31;
				intOrPtr _t34;
				void* _t35;
				intOrPtr _t36;
				intOrPtr _t46;
				intOrPtr _t48;
				intOrPtr _t58;
				intOrPtr _t62;
				intOrPtr _t65;
				void* _t67;
				intOrPtr _t70;
				intOrPtr _t71;
				void* _t73;
				intOrPtr* _t74;

				_t74 = _t73 - 0x10;
				_t30 = _a8;
				if(_t30 != 0) {
					if(_t30 == 1) {
						_v24 = E6E2E4370;
						 *_t74 = 1; // executed
						_t31 =  *0x6e2ef180(); // executed
						 *0x6e2ec02c = _t31;
						return 1;
					} else {
						if(_t30 == 3) {
							_t34 =  *0x6e2ea020;
							if(_t34 != 0xffffffff) {
								 *_t74 = _t34;
								_t35 = TlsGetValue(??);
								_t74 = _t74 - 4;
								_t67 = _t35;
								if(_t35 != 0) {
									if(( *(_t35 + 0x20) & 0x00000030) == 0) {
										_t36 =  *((intOrPtr*)(_t35 + 0x18));
										if( *((intOrPtr*)(_t67 + 0x68)) != 0) {
											if(_t36 != 0) {
												 *_t74 = _t36;
												CloseHandle(??);
												_t74 = _t74 - 4;
											}
											_t27 = _t67 + 0x1c; // 0x1c
											 *((intOrPtr*)(_t67 + 0x18)) = 0;
											 *_t74 = _t27;
											E6E2E3470();
											_t29 = _t67 + 0x38; // 0x38
											E6E2E4A20(_t29, _t67, _t70, _t71);
										} else {
											if(_t36 != 0) {
												 *_t74 = _t36;
												CloseHandle(??);
												_t74 = _t74 - 4;
											}
											_t42 =  *((intOrPtr*)(_t67 + 0xb4));
											 *((intOrPtr*)(_t67 + 0x18)) = 0;
											 *((intOrPtr*)(_t67 + 0x68)) = 1;
											if( *((intOrPtr*)(_t67 + 0xb4)) != 0) {
												E6E2E4C60(_t42);
											}
											_t20 = _t67 + 0x1c; // 0x1c
											_t70 = _t20;
											_t21 = _t67 + 0x38; // 0x38
											_t71 = _t21;
											if(( *(_t67 + 0x24) & 0x00000004) == 0) {
												 *_t74 = _t70;
												E6E2E3470();
												E6E2E4A20(_t71, _t67, _t70, _t71);
											} else {
												_t46 =  *((intOrPtr*)(_t67 + 0x14));
												 *_t67 = 0xdeadbeef;
												if(_t46 != 0) {
													 *_t74 = _t46;
													CloseHandle(??);
													_t74 = _t74 - 4;
												}
												 *((intOrPtr*)(_t67 + 0x14)) = 0;
												 *_t74 = _t70;
												E6E2E3470();
												_t48 = _t71;
												goto L15;
											}
										}
									} else {
										_t57 =  *((intOrPtr*)(_t35 + 0xb4));
										if( *((intOrPtr*)(_t35 + 0xb4)) != 0) {
											E6E2E4C60(_t57);
										}
										_t58 =  *((intOrPtr*)(_t67 + 0x14));
										if(_t58 != 0) {
											 *_t74 = _t58;
											_t71 =  *0x6e2ef184;
											CloseHandle(??);
											_t62 =  *((intOrPtr*)(_t67 + 0x18));
											_t74 = _t74 - 4;
											if(_t62 != 0) {
												 *_t74 = _t62;
												CloseHandle(??);
												_t74 = _t74 - 4;
											}
											 *((intOrPtr*)(_t67 + 0x18)) = 0;
											 *((intOrPtr*)(_t67 + 0x14)) = 0;
										}
										_t11 = _t67 + 0x1c; // 0x1c
										 *_t74 = _t11;
										E6E2E3470();
										_t12 = _t67 + 0x38; // 0x38
										_t48 = _t12;
										L15:
										E6E2E4A20(_t48, _t67, _t70, _t71);
										E6E2E4650(_t67);
										_v24 = 0;
										 *_t74 =  *0x6e2ea020;
										TlsSetValue(??, ??);
										_t74 = _t74 - 8;
									}
								}
							}
						}
						goto L2;
					}
				} else {
					if(_a12 == 0) {
						_t65 =  *0x6e2ec02c;
						if(_t65 != 0) {
							 *_t74 = _t65;
							 *0x6e2ef1fc();
							 *0x6e2ec02c = 0;
							_t74 = _t74 - 4;
						}
					}
					L2:
					return 1;
				}
			}

0x6e2e4d63
0x6e2e4d66
0x6e2e4d6c
0x6e2e4d93
0x6e2e4e70
0x6e2e4e78
0x6e2e4e7f
0x6e2e4e88
0x6e2e4e98
0x6e2e4d99
0x6e2e4d9c
0x6e2e4d9e
0x6e2e4da6
0x6e2e4da8
0x6e2e4dab
0x6e2e4db1
0x6e2e4db4
0x6e2e4db8
0x6e2e4dbe
0x6e2e4ea3
0x6e2e4ea8
0x6e2e4f1a
0x6e2e4f1c
0x6e2e4f1f
0x6e2e4f25
0x6e2e4f25
0x6e2e4f28
0x6e2e4f2b
0x6e2e4f32
0x6e2e4f35
0x6e2e4f3a
0x6e2e4f3d
0x6e2e4eaa
0x6e2e4eac
0x6e2e4eae
0x6e2e4eb1
0x6e2e4eb7
0x6e2e4eb7
0x6e2e4eba
0x6e2e4ec0
0x6e2e4ec7
0x6e2e4ed0
0x6e2e4ed2
0x6e2e4ed2
0x6e2e4ed7
0x6e2e4ed7
0x6e2e4eda
0x6e2e4eda
0x6e2e4ee1
0x6e2e4f50
0x6e2e4f53
0x6e2e4f5a
0x6e2e4ee3
0x6e2e4ee3
0x6e2e4ee6
0x6e2e4eee
0x6e2e4ef0
0x6e2e4ef3
0x6e2e4ef9
0x6e2e4ef9
0x6e2e4efc
0x6e2e4f03
0x6e2e4f06
0x6e2e4f0b
0x00000000
0x6e2e4f0b
0x6e2e4ee1
0x6e2e4dc4
0x6e2e4dc4
0x6e2e4dcc
0x6e2e4dce
0x6e2e4dce
0x6e2e4dd3
0x6e2e4dd8
0x6e2e4dda
0x6e2e4ddd
0x6e2e4de3
0x6e2e4de5
0x6e2e4de8
0x6e2e4ded
0x6e2e4def
0x6e2e4df2
0x6e2e4df4
0x6e2e4df4
0x6e2e4df7
0x6e2e4dfe
0x6e2e4dfe
0x6e2e4e05
0x6e2e4e08
0x6e2e4e0b
0x6e2e4e10
0x6e2e4e10
0x6e2e4e13
0x6e2e4e13
0x6e2e4e1a
0x6e2e4e24
0x6e2e4e2c
0x6e2e4e2f
0x6e2e4e35
0x6e2e4e35
0x6e2e4dbe
0x6e2e4db8
0x6e2e4da6
0x00000000
0x6e2e4d9c
0x6e2e4d6e
0x6e2e4d74
0x6e2e4e40
0x6e2e4e47
0x6e2e4e4d
0x6e2e4e50
0x6e2e4e56
0x6e2e4e60
0x6e2e4e60
0x6e2e4e47
0x6e2e4d7a
0x6e2e4d85
0x6e2e4d85

APIs

TlsGetValue.KERNEL32 ref: 6E2E4DAB
CloseHandle.KERNEL32 ref: 6E2E4DE3
CloseHandle.KERNEL32 ref: 6E2E4DF2
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E4E0B
TlsSetValue.KERNEL32 ref: 6E2E4E2F
RtlRemoveVectoredExceptionHandler.NTDLL ref: 6E2E4E50

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CloseHandleValue$ExceptionHandlerRemoveVectoredpthread_mutex_destroy
String ID:
API String ID: 277988988-0
Opcode ID: 892ac8feec87c75aab3dc63c4576e593016c5f58dfe324e4bf1917a6495af5cb
Instruction ID: 423e834cd27b1b6e0e0ee392c5a37a2aa5d4754dc717bcb6687fcecbeb771e17
Opcode Fuzzy Hash: 892ac8feec87c75aab3dc63c4576e593016c5f58dfe324e4bf1917a6495af5cb
Instruction Fuzzy Hash: FB4184B050462A8FEB40AFB8D59C76B7BF6EF01305F804968E844CB755E734D856CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4E68 Relevance: 1.5, APIs: 1, Instructions: 13
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAddVectoredExceptionHandler.NTDLL ref: 6E2E4E7F

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ExceptionHandlerVectored
String ID:
API String ID: 3310709589-0
Opcode ID: 3399cf3ca4a5032f991388efa30703f199cf6526318023ff0610103cb4e2339d
Instruction ID: 7d03742730e5bdb5c8a73b8cadfce0493cdfa54908e1ee0de539b71b7d35379e
Opcode Fuzzy Hash: 3399cf3ca4a5032f991388efa30703f199cf6526318023ff0610103cb4e2339d
Instruction Fuzzy Hash: 7DD0A7738042108FE3006F6CE40975FBBA0F746301F40441DD08857104D3710450CBA1

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 6E2E7E60 Relevance: 7.6, APIs: 5, Instructions: 55COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 6E2E7EAF
UnhandledExceptionFilter.KERNEL32 ref: 6E2E7EBF
GetCurrentProcess.KERNEL32 ref: 6E2E7EC8
TerminateProcess.KERNEL32 ref: 6E2E7ED9
abort.MSVCRT ref: 6E2E7EE2

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentTerminateabort
String ID:
API String ID: 520269711-0
Opcode ID: d71973dd87f84847532c2d18ffdbf5af84148e3fa1a3cffc66aa6fa1f5ed8125
Instruction ID: 542f0754b7956ab05b9f165604cf68f547650f304e5dd55250582f0f9f1940cb
Opcode Fuzzy Hash: d71973dd87f84847532c2d18ffdbf5af84148e3fa1a3cffc66aa6fa1f5ed8125
Instruction Fuzzy Hash: 0B11F8B4904B65CFDB00EFADD14965ABFF2BB4A304F44892DE8888B305E7749954CF62

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E7E5C Relevance: 7.5, APIs: 5, Instructions: 47COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 6E2E7EAF
UnhandledExceptionFilter.KERNEL32 ref: 6E2E7EBF
GetCurrentProcess.KERNEL32 ref: 6E2E7EC8
TerminateProcess.KERNEL32 ref: 6E2E7ED9
abort.MSVCRT ref: 6E2E7EE2

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentTerminateabort
String ID:
API String ID: 520269711-0
Opcode ID: debccc10b6279df7e0bcaf58333f71f37f96aeb7d450de4820226c3752ccb792
Instruction ID: 1047ad8abf340ba7e1bddc1ee5a8bcc0740e76a2bd4771f0196649f70b8f6fe0
Opcode Fuzzy Hash: debccc10b6279df7e0bcaf58333f71f37f96aeb7d450de4820226c3752ccb792
Instruction Fuzzy Hash: 62111BB5800B65CFEB00EFBDD14D21A7FF2BB06304F408929E8588B205E7749944CF62

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E8C00 Relevance: .3, Instructions: 331COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 936d36e4b1e7044877814494e1afb36be50a9aae116f34b460b2a406a0e7c59f
Instruction ID: b05c19d9c0f32e9c2ebb01a5798ef2232781b057ffcb98f32ae6c40e9dd5e0dd
Opcode Fuzzy Hash: 936d36e4b1e7044877814494e1afb36be50a9aae116f34b460b2a406a0e7c59f
Instruction Fuzzy Hash: F8C18B71A183268BD318CF6AC44012AB7E2FFD8714F89892EF9D897754E775D805CB82

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4F70 Relevance: 28.6, APIs: 19, Instructions: 115
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E4F95
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E4F9D
TlsSetValue.KERNEL32 ref: 6E2E4FBF
GetCurrentThreadId.KERNEL32 ref: 6E2E4FC7
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E4FD3
_setjmp3.MSVCRT ref: 6E2E4FE6
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E4FFA
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E5008
CloseHandle.KERNEL32 ref: 6E2E501C
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E503A
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E5042
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E5065
Sleep.KERNEL32(00000000), ref: 6E2E5079
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E5085
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E50A5
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E50DB
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E50E3
TlsSetValue.KERNEL32 ref: 6E2E50FF
_endthreadex.MSVCRT ref: 6E2E510F

Part of subcall function 6E2E4990: pthread_mutex_lock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E49A8
Part of subcall function 6E2E4990: pthread_tls_init.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E49B7
Part of subcall function 6E2E4990: pthread_mutex_unlock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E49C9

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_lockpthread_mutex_unlock$Valuepthread_mutex_destroy$CloseCurrentHandleSleepThread_endthreadex_setjmp3pthread_tls_init
String ID:
API String ID: 3376602310-0
Opcode ID: 28aef265d4d68d55370bbeb83e6be3e40f7a693983cdd4d62c2863314b7bae3f
Instruction ID: c5e4f389e5eac7a902589a9992085917b49a754cd5c8f65caf5758b58eb6fce3
Opcode Fuzzy Hash: 28aef265d4d68d55370bbeb83e6be3e40f7a693983cdd4d62c2863314b7bae3f
Instruction Fuzzy Hash: 97417CB450472A8FDB00AFA5C488AAEBBFAFF09304F418D5CE4949B711D774D845CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5CA0 Relevance: 24.1, APIs: 16, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6E2E5CB4

Part of subcall function 6E2E4C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C36
Part of subcall function 6E2E4C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C4B

GetHandleInformation.KERNEL32 ref: 6E2E5CDD
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E5CF4

Part of subcall function 6E2E4AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6E2E5ADA,?,?,?,?,6E2E6ADD), ref: 6E2E4AED

SetEvent.KERNEL32 ref: 6E2E5D42
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E5D4E
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E5DDB

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$pthread_mutex_lock$EventHandleInformationValue__pth_gpointer_locked
String ID:
API String ID: 1371553515-0
Opcode ID: fa3921ea95cee3abea5f712b1611f212f7cc12f76d09a2bd8490b7e94fd99b4f
Instruction ID: 3e9f8fba5f1b7c50c51768dff09b4afd641413b431a452224a3447d20982c047
Opcode Fuzzy Hash: fa3921ea95cee3abea5f712b1611f212f7cc12f76d09a2bd8490b7e94fd99b4f
Instruction Fuzzy Hash: 725120B15247668FDB00AFB8E98C29A7FF2AF42315F500A5CDCA48B649D334C855CB62

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5AD0 Relevance: 19.6, APIs: 13, Instructions: 105
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 71%

			E6E2E5AD0(void* __ecx, void* __edi, void* __ebp, void* __eflags) {
				signed int _v24;
				signed int _v52;
				void* __ebx;
				void* __esi;
				intOrPtr _t19;
				signed int _t21;
				signed int _t25;
				signed int _t28;
				void* _t36;
				signed int _t38;
				void* _t45;
				intOrPtr _t46;
				signed int _t47;
				signed int _t50;
				void* _t53;
				signed int _t54;
				void* _t56;
				void* _t57;
				void* _t58;
				signed int* _t59;
				signed int* _t62;

				_t57 = __ebp;
				_t52 = __edi;
				_t59 = _t58 - 0x14;
				_t19 = E6E2E4AD0(_t45, __ecx, __edi, _t53);
				if(_t19 == 0) {
					L3:
					return _t19;
				} else {
					_t46 = _t19;
					if(( *(_t19 + 0x20) & 0x0000000c) != 0) {
						goto L3;
					} else {
						_t19 =  *0x6e2ec058;
						if(_t19 != 0) {
							_t4 = _t46 + 0x1c; // 0x1c
							_t54 = _t4;
							 *_t59 = _t54;
							E6E2E2F90();
							_t21 =  *(_t46 + 0x20) & 0x000000ff;
							__eflags = _t21 & 0x00000003;
							if((_t21 & 0x00000003) == 0) {
								L7:
								 *_t59 = _t54;
								return E6E2E32E0();
							} else {
								_t50 =  *(_t46 + 0x24);
								__eflags = _t50 & 0x00000001;
								if((_t50 & 0x00000001) == 0) {
									goto L7;
								} else {
									_t49 =  *(_t46 + 0x10);
									__eflags =  *(_t46 + 0x10);
									if( *(_t46 + 0x10) <= 0) {
										 *(_t46 + 0x24) = _t50 & 0xfffffffe;
										 *(_t46 + 0x20) = _t21 & 0xfffffff3 | 0x00000004;
										_t25 =  *(_t46 + 0x18);
										__eflags = _t25;
										if(_t25 != 0) {
											 *_t59 = _t25;
											_push(ResetEvent(??));
										}
										 *_t59 = _t54;
										E6E2E32E0();
										L6E2E5A10(_t49, _t52, _t54, _t57, __eflags);
										_push(_t54);
										_push(_t46);
										_t62 = _t59 - 0x14;
										_t28 = _v24;
										__eflags = _t28;
										if(_t28 == 0) {
											E6E2E4AD0(_t46, _t49, _t52, _t54);
											goto L18;
										} else {
											 *_t62 = _t28;
											_t47 = E6E2E2CB0();
											__eflags = 0xfffffffe - _t47;
											asm("sbb eax, edx");
											if(0xfffffffe < _t47) {
												_t36 = E6E2E4AD0(_t47, _t49, _t52, _t54);
												_t47 = 0xffffffff;
												E6E2E5AD0(_t49, _t52, _t57, __eflags);
												_t38 =  *(_t36 + 0x18);
												__eflags = _t38;
												if(__eflags != 0) {
													goto L15;
												} else {
													goto L21;
												}
												goto L16;
											} else {
												_t56 = E6E2E4AD0(_t47, _t49, _t52, _t54);
												__eflags = _t47;
												if(__eflags == 0) {
													L18:
													E6E2E5AD0(_t49, _t52, _t57, __eflags);
													 *_t62 = 0;
													Sleep(??);
													E6E2E5AD0(_t49, _t52, _t57, __eflags);
													__eflags = 0;
													return 0;
												} else {
													E6E2E5AD0(_t49, _t52, _t57, __eflags);
													_t38 =  *(_t56 + 0x18);
													__eflags = _t38;
													if(__eflags == 0) {
														L21:
														 *_t62 = _t47;
														Sleep(??);
														_t62 = _t62 - 4;
													} else {
														L15:
														_v52 = _t47;
														 *_t62 = _t38;
														E6E2E2DC0();
													}
													L16:
													E6E2E5AD0(_t49, _t52, _t57, __eflags);
													__eflags = 0;
													return 0;
												}
											}
										}
									} else {
										goto L7;
									}
								}
							}
						} else {
							goto L3;
						}
					}
				}
			}

0x6e2e5ad0
0x6e2e5ad0
0x6e2e5ad2
0x6e2e5ad5
0x6e2e5adc
0x6e2e5aef
0x6e2e5af4
0x6e2e5ade
0x6e2e5ade
0x6e2e5ae4
0x00000000
0x6e2e5ae6
0x6e2e5ae6
0x6e2e5aed
0x6e2e5af8
0x6e2e5af8
0x6e2e5afb
0x6e2e5afe
0x6e2e5b03
0x6e2e5b07
0x6e2e5b09
0x6e2e5b1a
0x6e2e5b1a
0x6e2e5b27
0x6e2e5b0b
0x6e2e5b0b
0x6e2e5b0e
0x6e2e5b11
0x00000000
0x6e2e5b13
0x6e2e5b13
0x6e2e5b16
0x6e2e5b18
0x6e2e5b31
0x6e2e5b34
0x6e2e5b37
0x6e2e5b3a
0x6e2e5b3c
0x6e2e5b3e
0x6e2e5b47
0x6e2e5b47
0x6e2e5b48
0x6e2e5b4b
0x6e2e5b50
0x6e2e5b60
0x6e2e5b61
0x6e2e5b62
0x6e2e5b65
0x6e2e5b69
0x6e2e5b6b
0x6e2e5bc0
0x00000000
0x6e2e5b6d
0x6e2e5b6d
0x6e2e5b75
0x6e2e5b7c
0x6e2e5b83
0x6e2e5b85
0x6e2e5bf0
0x6e2e5bf5
0x6e2e5bfc
0x6e2e5c01
0x6e2e5c04
0x6e2e5c06
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x6e2e5b87
0x6e2e5b8c
0x6e2e5b8e
0x6e2e5b90
0x6e2e5bc5
0x6e2e5bc5
0x6e2e5bca
0x6e2e5bd1
0x6e2e5bda
0x6e2e5be2
0x6e2e5be6
0x6e2e5b92
0x6e2e5b92
0x6e2e5b97
0x6e2e5b9a
0x6e2e5b9c
0x6e2e5c10
0x6e2e5c10
0x6e2e5c13
0x6e2e5c19
0x6e2e5b9e
0x6e2e5b9e
0x6e2e5b9e
0x6e2e5ba2
0x6e2e5ba5
0x6e2e5ba5
0x6e2e5baa
0x6e2e5baa
0x6e2e5bb2
0x6e2e5bb6
0x6e2e5bb6
0x6e2e5b90
0x6e2e5b85
0x00000000
0x00000000
0x00000000
0x6e2e5b18
0x6e2e5b11
0x00000000
0x00000000
0x00000000
0x6e2e5aed
0x6e2e5ae4

APIs

Part of subcall function 6E2E4AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6E2E5ADA,?,?,?,?,6E2E6ADD), ref: 6E2E4AED

pthread_mutex_lock.LIBWINPTHREAD-1(?,?,?,?,6E2E6ADD), ref: 6E2E5AFE
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,6E2E6ADD), ref: 6E2E5B1D

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Valuepthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 2393744784-0
Opcode ID: 2de1503c7742a65e8edc141a431eb7a201280f919ab6d86c15dc3cc66ff10f7c
Instruction ID: eb1f10e1f9937b9dbd9df29cf96ec6b93aab63ee2b9999e1d2e4b9e65aa2e358
Opcode Fuzzy Hash: 2de1503c7742a65e8edc141a431eb7a201280f919ab6d86c15dc3cc66ff10f7c
Instruction Fuzzy Hash: C3310AB562463A4BEB40BFF998C039B77D6BF01318FC10E5CD89697645EB20D841C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E7FF0 Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 124
filememoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

fwrite.MSVCRT ref: 6E2E801F
vfprintf.MSVCRT ref: 6E2E803F
abort.MSVCRT ref: 6E2E8044
VirtualQuery.KERNEL32 ref: 6E2E80D7
VirtualProtect.KERNEL32 ref: 6E2E812D
GetLastError.KERNEL32 ref: 6E2E813A

Strings

VirtualQuery failed for %d bytes at address %p, xrefs: 6E2E8167
VirtualProtect failed with code 0x%x, xrefs: 6E2E8140
Mingw-w64 runtime failure:, xrefs: 6E2E8018
@, xrefs: 6E2E811E
Address %p has no image-section, xrefs: 6E2E817B

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Virtual$ErrorLastProtectQueryabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$@$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 1616349570-4164700141
Opcode ID: 7ffc4c68337784a32e4472d68f62b35940c9b4ce2a5ac1efde153eb12d9ba4ce
Instruction ID: e7b9f4c115876ba8cc035a0be5bb31c42b6d5f68517707da2e00e784eb5bf87c
Opcode Fuzzy Hash: 7ffc4c68337784a32e4472d68f62b35940c9b4ce2a5ac1efde153eb12d9ba4ce
Instruction Fuzzy Hash: B9419CB58047258FD704EFA9C48565AFBE6FF85304F88891EE8988B704E770D844CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4AD0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 97
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 16%

			E6E2E4AD0(void* __ebx, signed char __ecx, void* __edi, void* __esi) {
				void* _t238;
				void* _t243;
				void* _t248;
				signed int _t249;
				signed char _t252;
				signed char _t253;
				signed int _t255;
				signed int _t261;
				signed char _t262;
				signed char _t266;
				int _t270;
				int _t275;
				void* _t279;
				void* _t281;
				signed char _t318;
				void* _t346;
				signed char _t347;
				signed int* _t350;
				void* _t351;
				signed int _t354;
				signed int _t359;
				void* _t365;
				intOrPtr* _t366;
				signed char** _t367;
				void** _t369;
				signed int _t370;
				intOrPtr* _t371;

				_t348 = __edi;
				_t318 = __ecx;
				_push(__edi);
				_t366 = _t365 - 0x2c;
				_t373 =  *0x6e2ec050 - 1;
				if( *0x6e2ec050 != 1) {
					E6E2E4990(__ecx, _t346, _t373);
				}
				 *_t366 =  *0x6e2ea020;
				_t238 = TlsGetValue(??);
				_t367 = _t366 - 4;
				_t279 = _t238;
				if(_t238 == 0) {
					_t354 = E6E2E48D0(__eflags);
					__eflags =  *0x6e2f0020;
					if( *0x6e2f0020 == 0) {
						goto L3;
					} else {
						__eflags = _t354;
						if(_t354 == 0) {
							goto L3;
						} else {
							 *(_t354 + 0x24) = 1;
							 *((intOrPtr*)(_t354 + 0x3c)) = GetCurrentThreadId();
							_t367[3] = 0;
							_t367[2] = 0;
							_t367[1] = 1;
							 *_t367 = 0;
							_t243 = CreateEventA(??, ??, ??, ??);
							 *((intOrPtr*)(_t354 + 0x1c)) = 0xffffffff;
							 *(_t354 + 0x18) = _t243;
							_t369 = _t367 - 0x10;
							_t8 = _t354 + 0x38; // 0x38
							E6E2E4A20(_t8, _t279, _t348, _t354);
							_t359 =  *0x6e2ef1a0;
							 *(_t354 + 0x64) = 0;
							 *(_t354 + 0x14) = 0;
							_t350 = GetCurrentProcess();
							_t281 = GetCurrentThread();
							_t248 = GetCurrentProcess();
							_t11 = _t354 + 0x14; // 0x14
							_t347 = _t11;
							_t369[2] = _t350;
							_t369[6] = 2;
							_t369[5] = 0;
							_t369[4] = 0;
							_t369[3] = _t347;
							_t369[1] = _t281;
							 *_t369 = _t248;
							_t249 = DuplicateHandle(??, ??, ??, ??, ??, ??, ??);
							_t370 = _t369 - 0x1c;
							__eflags = _t249;
							if(_t249 == 0) {
								L9:
								abort();
								asm("ud2");
								 *0 =  *(_t370 + 0x1c);
								asm("ud2");
								_t252 = _t370 + 0x14;
								 *0 = _t252;
								asm("ud2");
								asm("invalid");
								asm("invalid");
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								asm("invalid");
								asm("invalid");
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								 *_t252 =  *_t252 + _t252;
								__eflags =  *_t252;
								asm("das");
								if(__eflags <= 0) {
									L28:
									asm("bound esp, [ecx+0x72]");
									if(__eflags < 0) {
										goto L50;
									} else {
										goto L29;
									}
								} else {
									if(__eflags < 0) {
										L17:
										asm("popad");
										if(__eflags < 0) {
											goto L38;
										} else {
											if (__eflags >= 0) goto L29;
											goto L19;
										}
									} else {
										if(__eflags == 0) {
											L31:
											__eflags = _t253 - 0x494c203d;
											goto L32;
										} else {
											if(__eflags < 0) {
												L19:
												if(__eflags >= 0) {
													L29:
													if(__eflags < 0) {
														goto L36;
													} else {
														_t253 = _t252 - 0x6c61763e;
														_t370 =  *(_t253 + 0x3d) * 0x494c203d;
														__eflags = _t370;
														goto L31;
													}
												} else {
													if(__eflags > 0) {
														if(__eflags >= 0) {
															 *[gs:0x6c202c73] =  *[gs:0x6c202c73] & _t252;
															__eflags =  *[gs:0x6c202c73];
															goto L49;
														} else {
															 *[ds:eax] =  *[ds:eax] & _t347;
															 *_t252 =  *_t252 - _t252;
															_t318 =  &(1[_t318]);
															__eflags = _t318;
															if(__eflags >= 0) {
																goto L63;
															} else {
																if(__eflags < 0) {
																	goto L64;
																} else {
																	_t359 = _t350[0x1b] * 0x69616620;
																	__eflags = _t359;
																	goto L43;
																}
															}
														}
													} else {
														asm("outsb");
														if(__eflags < 0) {
															L43:
															asm("outsd");
															asm("outsb");
															goto L44;
														} else {
															_push(0x64616572);
															if(__eflags >= 0) {
																L32:
																__eflags = _t253 - 0x46494c20;
																_t359 =  &(1[_t359]);
																_pop(_t350);
																_t347 =  &(1[_t347]);
																_t318 =  &(1[_t318]);
																__eflags = _t318;
																_push(_t347);
																_push(_t347);
																goto L33;
															} else {
																if(__eflags >= 0) {
																	L46:
																	__eflags = _t252 -  *[fs:eax];
																	 *0x202c2973 =  *0x202c2973 - _t252;
																	__eflags =  *0x202c2973;
																} else {
																	asm("arpl [edi], bp");
																	asm("bound esp, [ecx+0x72]");
																	if(__eflags < 0) {
																		L45:
																		_t359 =  *(_t359 + 0x64) * 0x2528203a;
																		__eflags = _t359;
																		goto L46;
																	} else {
																		if(__eflags < 0) {
																			L33:
																			_t318 = _t318 - 1;
																			_t359 =  &(1[_t359]);
																			_push(_t347);
																			 *_t253 =  *_t253 - _t370;
																			 *[es:eax] =  *[es:eax] & _t318;
																			 *_t253 =  *_t253 - _t318;
																			__eflags =  *_t253;
																			asm("bound esp, [ecx+0x72]");
																			if(__eflags < 0) {
																				goto L54;
																			} else {
																				if(__eflags < 0) {
																					goto L53;
																				} else {
																					if(__eflags == 0) {
																						L44:
																						_t38 = _t354 + 0x61;
																						 *_t38 =  *(_t354 + 0x61) & _t252;
																						__eflags =  *_t38;
																						goto L45;
																					} else {
																						L36:
																						_t318 = _t318 -  *_t318;
																						_t253 = _t252 -  *(_t347 + 0x61);
																						__eflags = _t253;
																						if(__eflags < 0) {
																							goto L60;
																						} else {
																							_t370 =  *(_t359 + 0x72) * 0x623e2d29;
																							__eflags = _t370;
																							L38:
																							_t252 = _t253 - 0x7375623e;
																							__eflags = _t252;
																						}
																					}
																				}
																			}
																		} else {
																			asm("arpl [eax], ax");
																			 *_t252 =  *_t252 - _t318;
																			_t31 = _t347 + 0x61;
																			 *_t31 =  *(_t347 + 0x61) - _t252;
																			__eflags =  *_t31;
																			if( *_t31 < 0) {
																				L49:
																				asm("insb");
																				_t359 =  *(_t354 + 0x65) * 0xa642520;
																				__eflags = _t359;
																				L50:
																				_t253 = _t252 & 0x00000a64;
																				_t43 = _t281 + 0x25;
																				 *_t43 =  *(_t281 + 0x25) + _t253;
																				__eflags =  *_t43;
																				if(__eflags < 0) {
																					L55:
																					asm("das");
																					if(__eflags <= 0) {
																						goto L81;
																					} else {
																						if(__eflags < 0) {
																							goto L68;
																						} else {
																							if(__eflags == 0) {
																								goto L85;
																							} else {
																								goto L58;
																							}
																						}
																					}
																				} else {
																					_t281 = _t281 + 1;
																					_t253 = (_t253 & 0x73252064 |  *(_t253 & 0x73252064)) & 0x64252070;
																					_t45 = _t354 + 0x3d;
																					 *_t45 =  *(_t354 + 0x3d) & _t347;
																					__eflags =  *_t45;
																					__eflags = _t253 - 0x20583025;
																					if(__eflags > 0) {
																						L67:
																						if (__eflags < 0) goto L90;
																						L68:
																						asm("popad");
																					} else {
																						L53:
																						_t253 = _t253 & 0x2520646c;
																						__eflags = _t253;
																						if(__eflags >= 0) {
																							L58:
																							if(__eflags < 0) {
																								if(__eflags >= 0) {
																									goto L83;
																								} else {
																									if(__eflags > 0) {
																										goto L93;
																									} else {
																										asm("outsb");
																										if(__eflags < 0) {
																											goto L98;
																										} else {
																											_push(0x64616572);
																											if(__eflags >= 0) {
																												goto L86;
																											} else {
																												if(__eflags >= 0) {
																													_t253 = _t253 - 0x20;
																													__eflags = _t253;
																													goto L100;
																												} else {
																													asm("arpl [edi], bp");
																													if(__eflags < 0) {
																														goto L101;
																													} else {
																														asm("insb");
																														goto L78;
																													}
																												}
																											}
																										}
																									}
																								}
																							} else {
																								asm("bound esi, [ebp+0x69]");
																								asm("insb");
																								asm("das");
																								asm("insd");
																								_t359 =  *(_t354 + 0x67) * 0x36772d77;
																								__eflags = _t359;
																								L60:
																								asm("a16 ja 0x30");
																								if(__eflags > 0) {
																									L78:
																									asm("outsd");
																									asm("arpl [ebx+0x2e], bp");
																									asm("arpl [eax], ax");
																									 *_t253 =  *_t253 + _t318;
																									 *_t253 =  *_t253 - _t318;
																									__eflags =  *_t253;
																									if(__eflags < 0) {
																										goto L103;
																									} else {
																										goto L79;
																									}
																								} else {
																									_t262 = _t253 ^ 0x0000002d;
																									_t48 = _t318 + 0x31;
																									 *_t48 =  *(_t318 + 0x31) ^ _t262;
																									__eflags =  *_t48;
																									_t253 = _t262 ^ 0x6438370d;
																									__eflags =  *_t350 - _t318;
																									L63:
																									asm("insd");
																									_t359 =  *(_t354 + 0x67) * 0x36772d77;
																									__eflags = _t359;
																									L64:
																									if(__eflags > 0) {
																										L79:
																										asm("insb");
																										asm("outsd");
																										asm("arpl [ebx+0x5f], bp");
																										if(__eflags == 0) {
																											goto L87;
																										} else {
																											_t318 = _t318 -  *_t318;
																											_t347 = _t347 -  *((intOrPtr*)(_t347 + 0x77));
																											__eflags = _t347;
																											goto L81;
																										}
																									} else {
																										if(__eflags > 0) {
																											L81:
																											if(__eflags > 0) {
																												L104:
																												if(__eflags >= 0) {
																													 *((intOrPtr*)(_t347 + 0x57)) =  *((intOrPtr*)(_t347 + 0x57)) + _t347;
																													_t370 = _t370 - 1;
																													_t261 = (_t253 & 0x73252064 |  *(_t253 & 0x73252064)) & 0x64252070;
																													__eflags = _t261;
																													 *[fs:esi+0x3d] =  *[fs:esi+0x3d] & _t347;
																													_t253 = _t261 & 0x42205830;
																													_t253 - 0x72206425 = _t253 - 0x20646c25;
																												}
																												 *[fs:edi+0x3d] =  *[fs:edi+0x3d] & _t347;
																												__eflags =  *[fs:edi+0x3d];
																											} else {
																												 *0x6c61763e =  *0x6c61763e - _t359;
																												__eflags =  *0x6c61763e;
																												L83:
																												if(__eflags <= 0) {
																													L102:
																													_t253 = _t253 |  *_t253;
																													__eflags = _t253;
																													_push(_t347);
																													_push(_t350);
																													L103:
																													_t370 = _t370 - 1;
																													_t253 = _t253 & 0x64252070;
																													__eflags = _t253;
																													goto L104;
																												} else {
																													asm("insb");
																													_t370 =  *(_t253 + 0x3d) * 0x494c203d;
																													__eflags = _t370;
																													L85:
																													_t354 =  &(1[_t354]);
																													__eflags = _t354;
																													L86:
																													_t359 =  &(1[_t359]);
																													_pop(_t351);
																													_push(_t347);
																													_push(_t351);
																													_t370 = _t370 - 1;
																													_t350 = _t351 - 1;
																													_t281 = _t281 + 1 - 1;
																													 *_t253 =  *_t253 - _t370;
																													 *[es:eax] =  *[es:eax] & _t318;
																													__eflags =  *[es:eax];
																													L87:
																													 *[es:eax] =  *[es:eax] & _t318;
																													 *_t253 =  *_t253 - _t318;
																													__eflags =  *_t253;
																													if(__eflags < 0) {
																														_t255 = _t253 & 0x73252070 |  *(_t253 & 0x73252070);
																														__eflags = _t255;
																													} else {
																														asm("insb");
																														asm("outsd");
																														asm("arpl [ebx+0x5f], bp");
																														if(__eflags == 0) {
																															L97:
																															asm("popa");
																															_t359 =  *(_t359 + 0x64) * 0x2528203a;
																															__eflags = _t359;
																															L98:
																															__eflags = _t253 -  *[fs:eax];
																															 *0x202c2973 =  *0x202c2973 - _t253;
																															__eflags =  *0x202c2973;
																														} else {
																															_t318 = _t318 -  *_t318;
																															_t347 = _t347 -  *((intOrPtr*)(_t347 + 0x77));
																															asm("insb");
																															 *0x7375623e =  *0x7375623e - _t359;
																															__eflags =  *0x7375623e;
																															asm("bound esi, [ds:ebp+0x73]");
																															if(__eflags >= 0) {
																																L100:
																																__eflags =  *(_t359 + 0x20) * 0x7325;
																																L101:
																																_t253 = _t253 - 0x20;
																																asm("insb");
																																_t359 =  *(_t354 + 0x65) * 0xa642520;
																																__eflags = _t359;
																																goto L102;
																															} else {
																																 *[ds:eax] =  *[ds:eax] & _t347;
																																 *_t253 =  *_t253 - _t253;
																																__eflags =  *_t253;
																																 *_t253 =  *_t253 + _t253;
																																 *_t253 =  *_t253 + _t253;
																																_t318 =  &(1[_t318]);
																																__eflags = _t318;
																																L93:
																																if(__eflags >= 0) {
																																	_t350[0x1b] = _t350[0x1b] & _t318;
																																	asm("arpl [ebp+0x20], sp");
																																	goto L116;
																																} else {
																																	if (__eflags < 0) goto L116;
																																	if(__eflags < 0) {
																																		L116:
																																		 *[gs:0x73692070] =  *[gs:0x73692070] & _t253;
																																		 *0xa64 =  *0xa64 & _t253;
																																		_t65 = _t359 + 0x72;
																																		 *_t65 =  *(_t359 + 0x72) + _t253;
																																		__eflags =  *_t65;
																																		if (__eflags < 0) goto L128;
																																		asm("outsd");
																																	} else {
																																		_t359 = _t350[0x1b] * 0x69616620;
																																		__eflags = _t359;
																																		goto L97;
																																	}
																																}
																															}
																														}
																													}
																												}
																											}
																										} else {
																											_t253 = _t253 ^ 0x0000002d;
																											asm("insb");
																											_t370 =  *(_t347 + 0x72) * 0x65697261;
																											__eflags = _t370;
																											goto L67;
																										}
																									}
																								}
																							}
																						} else {
																							L54:
																							 *_t253 =  *_t253 + _t253;
																							 *_t350 =  *_t350 + _t318;
																							__eflags =  *_t350;
																							goto L55;
																						}
																					}
																				}
																			} else {
																				_t370 =  *(_t359 + 0x72) * 0x2a20745f;
																				 *_t347 =  *_t347 - _t359;
																				__eflags =  *_t347;
																				goto L28;
																			}
																		}
																	}
																}
															}
														}
													}
												}
											} else {
												asm("bound esi, [ebp+0x69]");
												asm("insb");
												asm("das");
												asm("insd");
												_t266 = _t252 ^ 0x0000002d;
												 *(_t318 + 0x31) =  *(_t318 + 0x31) ^ _t266;
												__eflags =  *_t350 - _t318;
												asm("insd");
												_t359 =  *(_t354 + 0x67) * 0x36772d77;
												_t253 = _t266 ^ 0x64383720;
												asm("insb");
												_t370 =  *(_t347 + 0x72) * 0x65697261;
												__eflags = _t370;
												goto L17;
											}
										}
									}
								}
								_t253 = _t253 |  *_t253;
								__eflags = _t253;
							} else {
								 *_t370 =  *(_t354 + 0x14);
								_t270 = GetThreadPriority(??);
								 *(_t354 + 0x68) = 0;
								 *(_t354 + 0x6c) = _t270;
								_t371 = _t370 - 4;
								 *(_t354 + 0x20) =  *(_t354 + 0x20) & 0xcf | 0x00000010;
								 *(_t371 + 4) = _t354;
								 *_t371 =  *0x6e2ea020;
								_t275 = TlsSetValue(??, ??);
								_t370 = _t371 - 8;
								__eflags = _t275;
								if(_t275 == 0) {
									goto L9;
								} else {
									return _t354;
								}
							}
						}
					}
				} else {
					L3:
					return _t279;
				}
			}

0x6e2e4ad0
0x6e2e4ad0
0x6e2e4ad1
0x6e2e4ad4
0x6e2e4ad7
0x6e2e4ade
0x6e2e4ae0
0x6e2e4ae0
0x6e2e4aea
0x6e2e4aed
0x6e2e4af3
0x6e2e4af6
0x6e2e4afa
0x6e2e4b15
0x6e2e4b1c
0x6e2e4b1e
0x00000000
0x6e2e4b20
0x6e2e4b20
0x6e2e4b22
0x00000000
0x6e2e4b24
0x6e2e4b24
0x6e2e4b31
0x6e2e4b34
0x6e2e4b3c
0x6e2e4b44
0x6e2e4b4c
0x6e2e4b53
0x6e2e4b59
0x6e2e4b60
0x6e2e4b63
0x6e2e4b66
0x6e2e4b69
0x6e2e4b6e
0x6e2e4b74
0x6e2e4b7b
0x6e2e4b84
0x6e2e4b8c
0x6e2e4b8e
0x6e2e4b90
0x6e2e4b90
0x6e2e4b93
0x6e2e4b97
0x6e2e4b9f
0x6e2e4ba7
0x6e2e4baf
0x6e2e4bb3
0x6e2e4bb7
0x6e2e4bba
0x6e2e4bc0
0x6e2e4bc3
0x6e2e4bc5
0x6e2e95c5
0x6e2e95c5
0x6e2e95cf
0x6e2e95d5
0x6e2e95da
0x6e2e95dc
0x6e2e95e0
0x6e2e95e5
0x6e2e95e8
0x6e2e95ea
0x6e2e95ec
0x6e2e95ee
0x6e2e95f0
0x6e2e95f2
0x6e2e95f4
0x6e2e95f6
0x6e2e95f8
0x6e2e95fa
0x6e2e95fc
0x6e2e95fe
0x6e2e9600
0x6e2e9602
0x6e2e9604
0x6e2e9606
0x6e2e9608
0x6e2e960a
0x6e2e960c
0x6e2e960e
0x6e2e9610
0x6e2e9612
0x6e2e9614
0x6e2e9616
0x6e2e9618
0x6e2e961a
0x6e2e961c
0x6e2e961e
0x6e2e9620
0x6e2e9622
0x6e2e9624
0x6e2e9626
0x6e2e9628
0x6e2e962a
0x6e2e962c
0x6e2e962e
0x6e2e9630
0x6e2e9632
0x6e2e9634
0x6e2e9636
0x6e2e9638
0x6e2e963a
0x6e2e963c
0x6e2e963e
0x6e2e9640
0x6e2e9642
0x6e2e9644
0x6e2e9646
0x6e2e9648
0x6e2e964a
0x6e2e964c
0x6e2e964e
0x6e2e9650
0x6e2e9652
0x6e2e9654
0x6e2e9656
0x6e2e9658
0x6e2e965a
0x6e2e965c
0x6e2e965e
0x6e2e9660
0x6e2e9662
0x6e2e9664
0x6e2e9666
0x6e2e9668
0x6e2e966a
0x6e2e966c
0x6e2e966e
0x6e2e9670
0x6e2e9672
0x6e2e9674
0x6e2e9676
0x6e2e9678
0x6e2e967a
0x6e2e967c
0x6e2e967e
0x6e2e9680
0x6e2e9682
0x6e2e9684
0x6e2e9686
0x6e2e9688
0x6e2e968a
0x6e2e968c
0x6e2e968e
0x6e2e9690
0x6e2e9692
0x6e2e9694
0x6e2e9696
0x6e2e9698
0x6e2e969a
0x6e2e969c
0x6e2e969e
0x6e2e96a0
0x6e2e96a2
0x6e2e96a4
0x6e2e96a6
0x6e2e96a8
0x6e2e96aa
0x6e2e96ac
0x6e2e96ae
0x6e2e96b0
0x6e2e96b2
0x6e2e96b4
0x6e2e96b6
0x6e2e96b8
0x6e2e96ba
0x6e2e96bc
0x6e2e96be
0x6e2e96c0
0x6e2e96c2
0x6e2e96c4
0x6e2e96c6
0x6e2e96c8
0x6e2e96ca
0x6e2e96cc
0x6e2e96ce
0x6e2e96d0
0x6e2e96d2
0x6e2e96d4
0x6e2e96d6
0x6e2e96d8
0x6e2e96da
0x6e2e96dc
0x6e2e96de
0x6e2e96e0
0x6e2e96e2
0x6e2e96e4
0x6e2e96e6
0x6e2e96e8
0x6e2e96ea
0x6e2e96ec
0x6e2e96ee
0x6e2e96f0
0x6e2e96f2
0x6e2e96f4
0x6e2e96f6
0x6e2e96f8
0x6e2e96fa
0x6e2e96fc
0x6e2e96fe
0x6e2e9700
0x6e2e9702
0x6e2e9704
0x6e2e9706
0x6e2e9708
0x6e2e970a
0x6e2e970c
0x6e2e970e
0x6e2e9710
0x6e2e9712
0x6e2e9714
0x6e2e9716
0x6e2e9718
0x6e2e971a
0x6e2e971c
0x6e2e971e
0x6e2e9720
0x6e2e9722
0x6e2e9724
0x6e2e9726
0x6e2e9728
0x6e2e972a
0x6e2e972c
0x6e2e972e
0x6e2e9730
0x6e2e9732
0x6e2e9734
0x6e2e9736
0x6e2e9738
0x6e2e973a
0x6e2e973c
0x6e2e973e
0x6e2e9740
0x6e2e9742
0x6e2e9744
0x6e2e9746
0x6e2e9748
0x6e2e974a
0x6e2e974c
0x6e2e974e
0x6e2e9750
0x6e2e9752
0x6e2e9754
0x6e2e9756
0x6e2e9758
0x6e2e975a
0x6e2e975c
0x6e2e975e
0x6e2e9760
0x6e2e9762
0x6e2e9764
0x6e2e9766
0x6e2e9768
0x6e2e976a
0x6e2e976c
0x6e2e976e
0x6e2e9770
0x6e2e9772
0x6e2e9774
0x6e2e9776
0x6e2e9778
0x6e2e977a
0x6e2e977c
0x6e2e977e
0x6e2e9780
0x6e2e9782
0x6e2e9784
0x6e2e9786
0x6e2e9788
0x6e2e978a
0x6e2e978c
0x6e2e978e
0x6e2e9790
0x6e2e9792
0x6e2e9794
0x6e2e9796
0x6e2e9798
0x6e2e979a
0x6e2e979c
0x6e2e979e
0x6e2e97a0
0x6e2e97a2
0x6e2e97a4
0x6e2e97a6
0x6e2e97a8
0x6e2e97aa
0x6e2e97ac
0x6e2e97ae
0x6e2e97b0
0x6e2e97b2
0x6e2e97b4
0x6e2e97b6
0x6e2e97b8
0x6e2e97ba
0x6e2e97bc
0x6e2e97be
0x6e2e97c0
0x6e2e97c2
0x6e2e97c4
0x6e2e97c6
0x6e2e97c8
0x6e2e97ca
0x6e2e97cc
0x6e2e97ce
0x6e2e97d0
0x6e2e97d2
0x6e2e97d4
0x6e2e97d6
0x6e2e97d8
0x6e2e97da
0x6e2e97dc
0x6e2e97de
0x6e2e97e0
0x6e2e97e2
0x6e2e97e4
0x6e2e97e6
0x6e2e97e8
0x6e2e97ea
0x6e2e97ec
0x6e2e97ee
0x6e2e97f0
0x6e2e97f2
0x6e2e97f4
0x6e2e97f6
0x6e2e97f8
0x6e2e97fa
0x6e2e97fc
0x6e2e97fe
0x6e2e9800
0x6e2e9802
0x6e2e9804
0x6e2e9806
0x6e2e9808
0x6e2e980a
0x6e2e980c
0x6e2e980e
0x6e2e9810
0x6e2e9812
0x6e2e9814
0x6e2e9816
0x6e2e9818
0x6e2e981a
0x6e2e981c
0x6e2e981e
0x6e2e9820
0x6e2e9822
0x6e2e9824
0x6e2e9826
0x6e2e9828
0x6e2e982a
0x6e2e982c
0x6e2e982e
0x6e2e9830
0x6e2e9832
0x6e2e9834
0x6e2e9836
0x6e2e9838
0x6e2e983a
0x6e2e983c
0x6e2e983e
0x6e2e9840
0x6e2e9842
0x6e2e9844
0x6e2e9846
0x6e2e9848
0x6e2e984a
0x6e2e984c
0x6e2e984e
0x6e2e9850
0x6e2e9852
0x6e2e9854
0x6e2e9856
0x6e2e9858
0x6e2e985a
0x6e2e985c
0x6e2e985e
0x6e2e9860
0x6e2e9862
0x6e2e9864
0x6e2e9866
0x6e2e9868
0x6e2e986a
0x6e2e986c
0x6e2e986e
0x6e2e9870
0x6e2e9872
0x6e2e9874
0x6e2e9876
0x6e2e9878
0x6e2e987a
0x6e2e987c
0x6e2e987e
0x6e2e9880
0x6e2e9882
0x6e2e9884
0x6e2e9886
0x6e2e9888
0x6e2e988a
0x6e2e988c
0x6e2e988e
0x6e2e9890
0x6e2e9892
0x6e2e9894
0x6e2e9896
0x6e2e9898
0x6e2e989a
0x6e2e989c
0x6e2e989e
0x6e2e98a0
0x6e2e98a2
0x6e2e98a4
0x6e2e98a6
0x6e2e98a8
0x6e2e98aa
0x6e2e98ac
0x6e2e98ae
0x6e2e98b0
0x6e2e98b2
0x6e2e98b4
0x6e2e98b6
0x6e2e98b8
0x6e2e98ba
0x6e2e98bc
0x6e2e98be
0x6e2e98c0
0x6e2e98c2
0x6e2e98c4
0x6e2e98c6
0x6e2e98c8
0x6e2e98ca
0x6e2e98cc
0x6e2e98ce
0x6e2e98d0
0x6e2e98d2
0x6e2e98d4
0x6e2e98d6
0x6e2e98d8
0x6e2e98da
0x6e2e98dc
0x6e2e98de
0x6e2e98e0
0x6e2e98e2
0x6e2e98e4
0x6e2e98e6
0x6e2e98e8
0x6e2e98ea
0x6e2e98ec
0x6e2e98ee
0x6e2e98f0
0x6e2e98f2
0x6e2e98f4
0x6e2e98f6
0x6e2e98f8
0x6e2e98fa
0x6e2e98fc
0x6e2e98fe
0x6e2e9900
0x6e2e9902
0x6e2e9904
0x6e2e9906
0x6e2e9908
0x6e2e990a
0x6e2e990c
0x6e2e990e
0x6e2e9910
0x6e2e9912
0x6e2e9914
0x6e2e9916
0x6e2e9918
0x6e2e991a
0x6e2e991c
0x6e2e991e
0x6e2e9920
0x6e2e9922
0x6e2e9924
0x6e2e9926
0x6e2e9928
0x6e2e992a
0x6e2e992c
0x6e2e992e
0x6e2e9930
0x6e2e9932
0x6e2e9934
0x6e2e9936
0x6e2e9938
0x6e2e993a
0x6e2e993c
0x6e2e993e
0x6e2e9940
0x6e2e9942
0x6e2e9944
0x6e2e9946
0x6e2e9948
0x6e2e994a
0x6e2e994c
0x6e2e994e
0x6e2e9950
0x6e2e9952
0x6e2e9954
0x6e2e9956
0x6e2e9958
0x6e2e995a
0x6e2e995c
0x6e2e995e
0x6e2e9960
0x6e2e9962
0x6e2e9964
0x6e2e9966
0x6e2e9968
0x6e2e996a
0x6e2e996c
0x6e2e996e
0x6e2e9970
0x6e2e9972
0x6e2e9974
0x6e2e9976
0x6e2e9978
0x6e2e997a
0x6e2e997c
0x6e2e997e
0x6e2e9980
0x6e2e9982
0x6e2e9984
0x6e2e9986
0x6e2e9988
0x6e2e998a
0x6e2e998c
0x6e2e998e
0x6e2e9990
0x6e2e9992
0x6e2e9994
0x6e2e9996
0x6e2e9998
0x6e2e999a
0x6e2e999c
0x6e2e999e
0x6e2e99a0
0x6e2e99a2
0x6e2e99a4
0x6e2e99a6
0x6e2e99a8
0x6e2e99aa
0x6e2e99ac
0x6e2e99ae
0x6e2e99b0
0x6e2e99b2
0x6e2e99b4
0x6e2e99b6
0x6e2e99b8
0x6e2e99ba
0x6e2e99bc
0x6e2e99be
0x6e2e99c0
0x6e2e99c2
0x6e2e99c4
0x6e2e99c6
0x6e2e99c8
0x6e2e99ca
0x6e2e99cc
0x6e2e99ce
0x6e2e99d0
0x6e2e99d2
0x6e2e99d4
0x6e2e99d6
0x6e2e99d8
0x6e2e99da
0x6e2e99dc
0x6e2e99de
0x6e2e99e0
0x6e2e99e2
0x6e2e99e4
0x6e2e99e6
0x6e2e99e8
0x6e2e99ea
0x6e2e99ec
0x6e2e99ee
0x6e2e99f0
0x6e2e99f2
0x6e2e99f4
0x6e2e99f6
0x6e2e99f8
0x6e2e99fa
0x6e2e99fc
0x6e2e99fe
0x6e2e9a00
0x6e2e9a02
0x6e2e9a04
0x6e2e9a06
0x6e2e9a08
0x6e2e9a0a
0x6e2e9a0c
0x6e2e9a0e
0x6e2e9a10
0x6e2e9a12
0x6e2e9a14
0x6e2e9a16
0x6e2e9a18
0x6e2e9a1a
0x6e2e9a1c
0x6e2e9a1e
0x6e2e9a20
0x6e2e9a22
0x6e2e9a24
0x6e2e9a26
0x6e2e9a28
0x6e2e9a2a
0x6e2e9a2c
0x6e2e9a2e
0x6e2e9a30
0x6e2e9a32
0x6e2e9a34
0x6e2e9a36
0x6e2e9a38
0x6e2e9a3a
0x6e2e9a3c
0x6e2e9a3e
0x6e2e9a40
0x6e2e9a42
0x6e2e9a44
0x6e2e9a46
0x6e2e9a48
0x6e2e9a4a
0x6e2e9a4c
0x6e2e9a4e
0x6e2e9a50
0x6e2e9a52
0x6e2e9a54
0x6e2e9a56
0x6e2e9a58
0x6e2e9a5a
0x6e2e9a5c
0x6e2e9a5e
0x6e2e9a60
0x6e2e9a62
0x6e2e9a64
0x6e2e9a66
0x6e2e9a68
0x6e2e9a6a
0x6e2e9a6c
0x6e2e9a6e
0x6e2e9a70
0x6e2e9a72
0x6e2e9a74
0x6e2e9a76
0x6e2e9a78
0x6e2e9a7a
0x6e2e9a7c
0x6e2e9a7e
0x6e2e9a80
0x6e2e9a82
0x6e2e9a84
0x6e2e9a86
0x6e2e9a88
0x6e2e9a8a
0x6e2e9a8c
0x6e2e9a8e
0x6e2e9a90
0x6e2e9a92
0x6e2e9a94
0x6e2e9a96
0x6e2e9a98
0x6e2e9a9a
0x6e2e9a9c
0x6e2e9a9e
0x6e2e9aa0
0x6e2e9aa2
0x6e2e9aa4
0x6e2e9aa6
0x6e2e9aa8
0x6e2e9aaa
0x6e2e9aac
0x6e2e9aae
0x6e2e9ab0
0x6e2e9ab2
0x6e2e9ab4
0x6e2e9ab6
0x6e2e9ab8
0x6e2e9aba
0x6e2e9abc
0x6e2e9abe
0x6e2e9ac0
0x6e2e9ac2
0x6e2e9ac4
0x6e2e9ac6
0x6e2e9ac8
0x6e2e9aca
0x6e2e9acc
0x6e2e9ace
0x6e2e9ad0
0x6e2e9ad2
0x6e2e9ad4
0x6e2e9ad6
0x6e2e9ad8
0x6e2e9ada
0x6e2e9adc
0x6e2e9ade
0x6e2e9ae0
0x6e2e9ae2
0x6e2e9ae4
0x6e2e9ae6
0x6e2e9ae8
0x6e2e9aea
0x6e2e9aec
0x6e2e9aee
0x6e2e9af0
0x6e2e9af2
0x6e2e9af4
0x6e2e9af6
0x6e2e9af8
0x6e2e9afa
0x6e2e9afc
0x6e2e9afe
0x6e2e9b00
0x6e2e9b02
0x6e2e9b04
0x6e2e9b06
0x6e2e9b08
0x6e2e9b0a
0x6e2e9b0c
0x6e2e9b0e
0x6e2e9b10
0x6e2e9b12
0x6e2e9b14
0x6e2e9b16
0x6e2e9b18
0x6e2e9b1a
0x6e2e9b1c
0x6e2e9b1e
0x6e2e9b20
0x6e2e9b22
0x6e2e9b24
0x6e2e9b26
0x6e2e9b28
0x6e2e9b2a
0x6e2e9b2c
0x6e2e9b2e
0x6e2e9b30
0x6e2e9b32
0x6e2e9b34
0x6e2e9b36
0x6e2e9b38
0x6e2e9b3a
0x6e2e9b3c
0x6e2e9b3e
0x6e2e9b40
0x6e2e9b42
0x6e2e9b44
0x6e2e9b46
0x6e2e9b48
0x6e2e9b4a
0x6e2e9b4c
0x6e2e9b4e
0x6e2e9b50
0x6e2e9b52
0x6e2e9b54
0x6e2e9b56
0x6e2e9b58
0x6e2e9b5a
0x6e2e9b5c
0x6e2e9b5e
0x6e2e9b60
0x6e2e9b62
0x6e2e9b64
0x6e2e9b66
0x6e2e9b68
0x6e2e9b6a
0x6e2e9b6c
0x6e2e9b6e
0x6e2e9b70
0x6e2e9b72
0x6e2e9b74
0x6e2e9b76
0x6e2e9b78
0x6e2e9b7a
0x6e2e9b7c
0x6e2e9b7e
0x6e2e9b80
0x6e2e9b82
0x6e2e9b84
0x6e2e9b86
0x6e2e9b88
0x6e2e9b8a
0x6e2e9b8c
0x6e2e9b8e
0x6e2e9b90
0x6e2e9b92
0x6e2e9b94
0x6e2e9b96
0x6e2e9b98
0x6e2e9b9a
0x6e2e9b9c
0x6e2e9b9e
0x6e2e9ba0
0x6e2e9ba2
0x6e2e9ba4
0x6e2e9ba6
0x6e2e9ba8
0x6e2e9baa
0x6e2e9bac
0x6e2e9bae
0x6e2e9bb0
0x6e2e9bb2
0x6e2e9bb4
0x6e2e9bb6
0x6e2e9bb8
0x6e2e9bba
0x6e2e9bbc
0x6e2e9bbe
0x6e2e9bc0
0x6e2e9bc2
0x6e2e9bc4
0x6e2e9bc6
0x6e2e9bc8
0x6e2e9bca
0x6e2e9bcc
0x6e2e9bce
0x6e2e9bd0
0x6e2e9bd2
0x6e2e9bd4
0x6e2e9bd6
0x6e2e9bd8
0x6e2e9bda
0x6e2e9bdc
0x6e2e9bde
0x6e2e9be0
0x6e2e9be2
0x6e2e9be4
0x6e2e9be6
0x6e2e9be8
0x6e2e9bea
0x6e2e9bec
0x6e2e9bee
0x6e2e9bf0
0x6e2e9bf2
0x6e2e9bf4
0x6e2e9bf6
0x6e2e9bf8
0x6e2e9bfa
0x6e2e9bfc
0x6e2e9bfe
0x6e2e9c00
0x6e2e9c02
0x6e2e9c04
0x6e2e9c06
0x6e2e9c08
0x6e2e9c0a
0x6e2e9c0c
0x6e2e9c0e
0x6e2e9c10
0x6e2e9c12
0x6e2e9c14
0x6e2e9c16
0x6e2e9c18
0x6e2e9c1a
0x6e2e9c1c
0x6e2e9c1e
0x6e2e9c20
0x6e2e9c22
0x6e2e9c24
0x6e2e9c26
0x6e2e9c28
0x6e2e9c2a
0x6e2e9c2c
0x6e2e9c2e
0x6e2e9c30
0x6e2e9c32
0x6e2e9c34
0x6e2e9c36
0x6e2e9c38
0x6e2e9c3a
0x6e2e9c3c
0x6e2e9c3e
0x6e2e9c40
0x6e2e9c42
0x6e2e9c44
0x6e2e9c46
0x6e2e9c48
0x6e2e9c4a
0x6e2e9c4c
0x6e2e9c4e
0x6e2e9c50
0x6e2e9c52
0x6e2e9c54
0x6e2e9c56
0x6e2e9c58
0x6e2e9c5a
0x6e2e9c5c
0x6e2e9c5e
0x6e2e9c60
0x6e2e9c62
0x6e2e9c64
0x6e2e9c66
0x6e2e9c68
0x6e2e9c6a
0x6e2e9c6c
0x6e2e9c6e
0x6e2e9c70
0x6e2e9c72
0x6e2e9c74
0x6e2e9c76
0x6e2e9c78
0x6e2e9c7a
0x6e2e9c7c
0x6e2e9c7e
0x6e2e9c80
0x6e2e9c82
0x6e2e9c84
0x6e2e9c86
0x6e2e9c88
0x6e2e9c8a
0x6e2e9c8c
0x6e2e9c8e
0x6e2e9c90
0x6e2e9c92
0x6e2e9c94
0x6e2e9c96
0x6e2e9c98
0x6e2e9c9a
0x6e2e9c9c
0x6e2e9c9e
0x6e2e9ca0
0x6e2e9ca2
0x6e2e9ca4
0x6e2e9ca6
0x6e2e9ca8
0x6e2e9caa
0x6e2e9cac
0x6e2e9cae
0x6e2e9cb0
0x6e2e9cb2
0x6e2e9cb4
0x6e2e9cb6
0x6e2e9cb8
0x6e2e9cba
0x6e2e9cbc
0x6e2e9cbe
0x6e2e9cc0
0x6e2e9cc2
0x6e2e9cc4
0x6e2e9cc6
0x6e2e9cc8
0x6e2e9cca
0x6e2e9ccc
0x6e2e9cce
0x6e2e9cd0
0x6e2e9cd2
0x6e2e9cd4
0x6e2e9cd6
0x6e2e9cd8
0x6e2e9cda
0x6e2e9cdc
0x6e2e9cde
0x6e2e9ce0
0x6e2e9ce2
0x6e2e9ce4
0x6e2e9ce6
0x6e2e9ce8
0x6e2e9cea
0x6e2e9cec
0x6e2e9cee
0x6e2e9cf0
0x6e2e9cf2
0x6e2e9cf4
0x6e2e9cf6
0x6e2e9cf8
0x6e2e9cfa
0x6e2e9cfc
0x6e2e9cfe
0x6e2e9d00
0x6e2e9d02
0x6e2e9d04
0x6e2e9d06
0x6e2e9d08
0x6e2e9d0a
0x6e2e9d0c
0x6e2e9d0e
0x6e2e9d10
0x6e2e9d12
0x6e2e9d14
0x6e2e9d16
0x6e2e9d18
0x6e2e9d1a
0x6e2e9d1c
0x6e2e9d1e
0x6e2e9d20
0x6e2e9d22
0x6e2e9d24
0x6e2e9d26
0x6e2e9d28
0x6e2e9d2a
0x6e2e9d2c
0x6e2e9d2e
0x6e2e9d30
0x6e2e9d32
0x6e2e9d34
0x6e2e9d36
0x6e2e9d38
0x6e2e9d3a
0x6e2e9d3c
0x6e2e9d3e
0x6e2e9d40
0x6e2e9d42
0x6e2e9d44
0x6e2e9d46
0x6e2e9d48
0x6e2e9d4a
0x6e2e9d4c
0x6e2e9d4e
0x6e2e9d50
0x6e2e9d52
0x6e2e9d54
0x6e2e9d56
0x6e2e9d58
0x6e2e9d5a
0x6e2e9d5c
0x6e2e9d5e
0x6e2e9d60
0x6e2e9d62
0x6e2e9d64
0x6e2e9d66
0x6e2e9d68
0x6e2e9d6a
0x6e2e9d6c
0x6e2e9d6e
0x6e2e9d70
0x6e2e9d72
0x6e2e9d74
0x6e2e9d76
0x6e2e9d78
0x6e2e9d7a
0x6e2e9d7c
0x6e2e9d7e
0x6e2e9d80
0x6e2e9d82
0x6e2e9d84
0x6e2e9d86
0x6e2e9d88
0x6e2e9d8a
0x6e2e9d8c
0x6e2e9d8e
0x6e2e9d90
0x6e2e9d92
0x6e2e9d94
0x6e2e9d96
0x6e2e9d98
0x6e2e9d9a
0x6e2e9d9c
0x6e2e9d9e
0x6e2e9da0
0x6e2e9da2
0x6e2e9da4
0x6e2e9da6
0x6e2e9da8
0x6e2e9daa
0x6e2e9dac
0x6e2e9dae
0x6e2e9db0
0x6e2e9db2
0x6e2e9db4
0x6e2e9db6
0x6e2e9db8
0x6e2e9dba
0x6e2e9dbc
0x6e2e9dbe
0x6e2e9dc0
0x6e2e9dc2
0x6e2e9dc4
0x6e2e9dc6
0x6e2e9dc8
0x6e2e9dca
0x6e2e9dcc
0x6e2e9dce
0x6e2e9dd0
0x6e2e9dd2
0x6e2e9dd4
0x6e2e9dd6
0x6e2e9dd8
0x6e2e9dda
0x6e2e9ddc
0x6e2e9dde
0x6e2e9de0
0x6e2e9de2
0x6e2e9de4
0x6e2e9de6
0x6e2e9de8
0x6e2e9dea
0x6e2e9dec
0x6e2e9dee
0x6e2e9df0
0x6e2e9df2
0x6e2e9df4
0x6e2e9df6
0x6e2e9df8
0x6e2e9dfa
0x6e2e9dfc
0x6e2e9dfe
0x6e2e9e00
0x6e2e9e02
0x6e2e9e04
0x6e2e9e06
0x6e2e9e08
0x6e2e9e0a
0x6e2e9e0c
0x6e2e9e0e
0x6e2e9e10
0x6e2e9e12
0x6e2e9e14
0x6e2e9e16
0x6e2e9e18
0x6e2e9e1a
0x6e2e9e1c
0x6e2e9e1e
0x6e2e9e20
0x6e2e9e22
0x6e2e9e24
0x6e2e9e26
0x6e2e9e28
0x6e2e9e2a
0x6e2e9e2c
0x6e2e9e2e
0x6e2e9e30
0x6e2e9e32
0x6e2e9e34
0x6e2e9e36
0x6e2e9e38
0x6e2e9e3a
0x6e2e9e3c
0x6e2e9e3e
0x6e2e9e40
0x6e2e9e42
0x6e2e9e44
0x6e2e9e46
0x6e2e9e48
0x6e2e9e4a
0x6e2e9e4c
0x6e2e9e4e
0x6e2e9e50
0x6e2e9e52
0x6e2e9e54
0x6e2e9e56
0x6e2e9e58
0x6e2e9e5a
0x6e2e9e5c
0x6e2e9e5e
0x6e2e9e60
0x6e2e9e62
0x6e2e9e64
0x6e2e9e66
0x6e2e9e68
0x6e2e9e6a
0x6e2e9e6c
0x6e2e9e6e
0x6e2e9e70
0x6e2e9e72
0x6e2e9e74
0x6e2e9e76
0x6e2e9e78
0x6e2e9e7a
0x6e2e9e7c
0x6e2e9e7e
0x6e2e9e80
0x6e2e9e82
0x6e2e9e84
0x6e2e9e86
0x6e2e9e88
0x6e2e9e8a
0x6e2e9e8c
0x6e2e9e8e
0x6e2e9e90
0x6e2e9e92
0x6e2e9e94
0x6e2e9e96
0x6e2e9e98
0x6e2e9e9a
0x6e2e9e9c
0x6e2e9e9e
0x6e2e9ea0
0x6e2e9ea2
0x6e2e9ea4
0x6e2e9ea6
0x6e2e9ea8
0x6e2e9eaa
0x6e2e9eac
0x6e2e9eae
0x6e2e9eb0
0x6e2e9eb2
0x6e2e9eb4
0x6e2e9eb6
0x6e2e9eb8
0x6e2e9eba
0x6e2e9ebc
0x6e2e9ebe
0x6e2e9ec0
0x6e2e9ec2
0x6e2e9ec4
0x6e2e9ec6
0x6e2e9ec8
0x6e2e9eca
0x6e2e9ecc
0x6e2e9ece
0x6e2e9ed0
0x6e2e9ed2
0x6e2e9ed4
0x6e2e9ed6
0x6e2e9ed8
0x6e2e9eda
0x6e2e9edc
0x6e2e9ede
0x6e2e9ee0
0x6e2e9ee2
0x6e2e9ee4
0x6e2e9ee6
0x6e2e9ee8
0x6e2e9eea
0x6e2e9eec
0x6e2e9eee
0x6e2e9ef0
0x6e2e9ef2
0x6e2e9ef4
0x6e2e9ef6
0x6e2e9ef8
0x6e2e9efa
0x6e2e9efc
0x6e2e9efe
0x6e2e9f00
0x6e2e9f02
0x6e2e9f04
0x6e2e9f06
0x6e2e9f08
0x6e2e9f0a
0x6e2e9f0c
0x6e2e9f0e
0x6e2e9f10
0x6e2e9f12
0x6e2e9f14
0x6e2e9f16
0x6e2e9f18
0x6e2e9f1a
0x6e2e9f1c
0x6e2e9f1e
0x6e2e9f20
0x6e2e9f22
0x6e2e9f24
0x6e2e9f26
0x6e2e9f28
0x6e2e9f2a
0x6e2e9f2c
0x6e2e9f2e
0x6e2e9f30
0x6e2e9f32
0x6e2e9f34
0x6e2e9f36
0x6e2e9f38
0x6e2e9f3a
0x6e2e9f3c
0x6e2e9f3e
0x6e2e9f40
0x6e2e9f42
0x6e2e9f44
0x6e2e9f46
0x6e2e9f48
0x6e2e9f4a
0x6e2e9f4c
0x6e2e9f4e
0x6e2e9f50
0x6e2e9f52
0x6e2e9f54
0x6e2e9f56
0x6e2e9f58
0x6e2e9f5a
0x6e2e9f5c
0x6e2e9f5e
0x6e2e9f60
0x6e2e9f62
0x6e2e9f64
0x6e2e9f66
0x6e2e9f68
0x6e2e9f6a
0x6e2e9f6c
0x6e2e9f6e
0x6e2e9f70
0x6e2e9f72
0x6e2e9f74
0x6e2e9f76
0x6e2e9f78
0x6e2e9f7a
0x6e2e9f7c
0x6e2e9f7e
0x6e2e9f80
0x6e2e9f82
0x6e2e9f84
0x6e2e9f86
0x6e2e9f88
0x6e2e9f8a
0x6e2e9f8c
0x6e2e9f8e
0x6e2e9f90
0x6e2e9f92
0x6e2e9f94
0x6e2e9f96
0x6e2e9f98
0x6e2e9f9a
0x6e2e9f9c
0x6e2e9f9e
0x6e2e9fa0
0x6e2e9fa2
0x6e2e9fa4
0x6e2e9fa6
0x6e2e9fa8
0x6e2e9faa
0x6e2e9fac
0x6e2e9fae
0x6e2e9fb0
0x6e2e9fb2
0x6e2e9fb4
0x6e2e9fb6
0x6e2e9fb8
0x6e2e9fba
0x6e2e9fbc
0x6e2e9fbe
0x6e2e9fc0
0x6e2e9fc2
0x6e2e9fc4
0x6e2e9fc6
0x6e2e9fc8
0x6e2e9fca
0x6e2e9fcc
0x6e2e9fce
0x6e2e9fd0
0x6e2e9fd2
0x6e2e9fd4
0x6e2e9fd6
0x6e2e9fd8
0x6e2e9fda
0x6e2e9fdc
0x6e2e9fde
0x6e2e9fe0
0x6e2e9fe2
0x6e2e9fe4
0x6e2e9fe6
0x6e2e9fe8
0x6e2e9fea
0x6e2e9fec
0x6e2e9fee
0x6e2e9ff0
0x6e2e9ff2
0x6e2e9ff4
0x6e2e9ff6
0x6e2e9ff8
0x6e2e9ffa
0x6e2e9ffc
0x6e2e9ffe
0x6e2ea000
0x6e2ea002
0x6e2ea004
0x6e2ea006
0x6e2ea008
0x6e2ea00a
0x6e2ea00c
0x6e2ea00e
0x6e2ea010
0x6e2ea012
0x6e2ea014
0x6e2ea016
0x6e2ea018
0x6e2ea01a
0x6e2ea01c
0x6e2ea01e
0x6e2ea020
0x6e2ea022
0x6e2ea024
0x6e2ea026
0x6e2ea028
0x6e2ea02a
0x6e2ea02c
0x6e2ea02e
0x6e2ea030
0x6e2ea032
0x6e2ea034
0x6e2ea036
0x6e2ea038
0x6e2ea03a
0x6e2ea03c
0x6e2ea03e
0x6e2ea040
0x6e2ea042
0x6e2ea044
0x6e2ea046
0x6e2ea048
0x6e2ea04a
0x6e2ea04c
0x6e2ea04e
0x6e2ea050
0x6e2ea052
0x6e2ea054
0x6e2ea056
0x6e2ea058
0x6e2ea05a
0x6e2ea05c
0x6e2ea05e
0x6e2ea060
0x6e2ea062
0x6e2ea064
0x6e2ea066
0x6e2ea068
0x6e2ea06a
0x6e2ea06c
0x6e2ea06e
0x6e2ea070
0x6e2ea072
0x6e2ea074
0x6e2ea076
0x6e2ea078
0x6e2ea07a
0x6e2ea07c
0x6e2ea07e
0x6e2ea080
0x6e2ea082
0x6e2ea084
0x6e2ea086
0x6e2ea088
0x6e2ea08a
0x6e2ea08c
0x6e2ea08e
0x6e2ea090
0x6e2ea092
0x6e2ea094
0x6e2ea096
0x6e2ea098
0x6e2ea09a
0x6e2ea09c
0x6e2ea09e
0x6e2ea0a0
0x6e2ea0a2
0x6e2ea0a4
0x6e2ea0a6
0x6e2ea0a8
0x6e2ea0aa
0x6e2ea0ac
0x6e2ea0ae
0x6e2ea0b0
0x6e2ea0b2
0x6e2ea0b4
0x6e2ea0b6
0x6e2ea0b8
0x6e2ea0ba
0x6e2ea0bc
0x6e2ea0be
0x6e2ea0c0
0x6e2ea0c2
0x6e2ea0c4
0x6e2ea0c6
0x6e2ea0c8
0x6e2ea0ca
0x6e2ea0cc
0x6e2ea0ce
0x6e2ea0d0
0x6e2ea0d2
0x6e2ea0d4
0x6e2ea0d6
0x6e2ea0d8
0x6e2ea0da
0x6e2ea0dc
0x6e2ea0de
0x6e2ea0e0
0x6e2ea0e2
0x6e2ea0e4
0x6e2ea0e6
0x6e2ea0e8
0x6e2ea0ea
0x6e2ea0ec
0x6e2ea0ee
0x6e2ea0f0
0x6e2ea0f2
0x6e2ea0f4
0x6e2ea0f6
0x6e2ea0f8
0x6e2ea0fa
0x6e2ea0fc
0x6e2ea0fe
0x6e2ea100
0x6e2ea102
0x6e2ea104
0x6e2ea106
0x6e2ea108
0x6e2ea10a
0x6e2ea10c
0x6e2ea10e
0x6e2ea110
0x6e2ea112
0x6e2ea114
0x6e2ea116
0x6e2ea118
0x6e2ea11a
0x6e2ea11c
0x6e2ea11e
0x6e2ea120
0x6e2ea122
0x6e2ea124
0x6e2ea126
0x6e2ea128
0x6e2ea12a
0x6e2ea12c
0x6e2ea12e
0x6e2ea130
0x6e2ea132
0x6e2ea134
0x6e2ea136
0x6e2ea138
0x6e2ea13a
0x6e2ea13c
0x6e2ea13e
0x6e2ea140
0x6e2ea142
0x6e2ea144
0x6e2ea146
0x6e2ea148
0x6e2ea14a
0x6e2ea14c
0x6e2ea14e
0x6e2ea150
0x6e2ea152
0x6e2ea154
0x6e2ea156
0x6e2ea158
0x6e2ea15a
0x6e2ea15c
0x6e2ea15e
0x6e2ea160
0x6e2ea162
0x6e2ea164
0x6e2ea166
0x6e2ea168
0x6e2ea16a
0x6e2ea16c
0x6e2ea16e
0x6e2ea170
0x6e2ea172
0x6e2ea174
0x6e2ea176
0x6e2ea178
0x6e2ea17a
0x6e2ea17c
0x6e2ea17e
0x6e2ea180
0x6e2ea182
0x6e2ea184
0x6e2ea186
0x6e2ea188
0x6e2ea18a
0x6e2ea18c
0x6e2ea18e
0x6e2ea190
0x6e2ea192
0x6e2ea194
0x6e2ea196
0x6e2ea198
0x6e2ea19a
0x6e2ea19c
0x6e2ea19e
0x6e2ea1a0
0x6e2ea1a2
0x6e2ea1a4
0x6e2ea1a6
0x6e2ea1a8
0x6e2ea1aa
0x6e2ea1ac
0x6e2ea1ae
0x6e2ea1b0
0x6e2ea1b2
0x6e2ea1b4
0x6e2ea1b6
0x6e2ea1b8
0x6e2ea1ba
0x6e2ea1bc
0x6e2ea1be
0x6e2ea1c0
0x6e2ea1c2
0x6e2ea1c4
0x6e2ea1c6
0x6e2ea1c8
0x6e2ea1ca
0x6e2ea1cc
0x6e2ea1ce
0x6e2ea1d0
0x6e2ea1d2
0x6e2ea1d4
0x6e2ea1d6
0x6e2ea1d8
0x6e2ea1da
0x6e2ea1dc
0x6e2ea1de
0x6e2ea1e0
0x6e2ea1e2
0x6e2ea1e4
0x6e2ea1e6
0x6e2ea1e8
0x6e2ea1ea
0x6e2ea1ec
0x6e2ea1ee
0x6e2ea1f0
0x6e2ea1f2
0x6e2ea1f4
0x6e2ea1f6
0x6e2ea1f8
0x6e2ea1fa
0x6e2ea1fc
0x6e2ea1fe
0x6e2ea200
0x6e2ea202
0x6e2ea204
0x6e2ea206
0x6e2ea208
0x6e2ea20a
0x6e2ea20c
0x6e2ea20e
0x6e2ea210
0x6e2ea212
0x6e2ea214
0x6e2ea216
0x6e2ea218
0x6e2ea21a
0x6e2ea21c
0x6e2ea21e
0x6e2ea220
0x6e2ea222
0x6e2ea224
0x6e2ea226
0x6e2ea228
0x6e2ea22a
0x6e2ea22c
0x6e2ea22e
0x6e2ea230
0x6e2ea232
0x6e2ea234
0x6e2ea236
0x6e2ea238
0x6e2ea23a
0x6e2ea23c
0x6e2ea23e
0x6e2ea240
0x6e2ea242
0x6e2ea244
0x6e2ea246
0x6e2ea248
0x6e2ea24a
0x6e2ea24c
0x6e2ea24e
0x6e2ea250
0x6e2ea252
0x6e2ea254
0x6e2ea256
0x6e2ea258
0x6e2ea25a
0x6e2ea25c
0x6e2ea25e
0x6e2ea260
0x6e2ea262
0x6e2ea264
0x6e2ea266
0x6e2ea268
0x6e2ea26a
0x6e2ea26c
0x6e2ea26e
0x6e2ea270
0x6e2ea272
0x6e2ea274
0x6e2ea276
0x6e2ea278
0x6e2ea27a
0x6e2ea27c
0x6e2ea27e
0x6e2ea280
0x6e2ea282
0x6e2ea284
0x6e2ea286
0x6e2ea288
0x6e2ea28a
0x6e2ea28c
0x6e2ea28e
0x6e2ea290
0x6e2ea292
0x6e2ea294
0x6e2ea296
0x6e2ea298
0x6e2ea29a
0x6e2ea29c
0x6e2ea29e
0x6e2ea2a0
0x6e2ea2a2
0x6e2ea2a4
0x6e2ea2a6
0x6e2ea2a8
0x6e2ea2aa
0x6e2ea2ac
0x6e2ea2ae
0x6e2ea2b0
0x6e2ea2b2
0x6e2ea2b4
0x6e2ea2b6
0x6e2ea2b8
0x6e2ea2ba
0x6e2ea2bc
0x6e2ea2be
0x6e2ea2c0
0x6e2ea2c2
0x6e2ea2c4
0x6e2ea2c6
0x6e2ea2c8
0x6e2ea2ca
0x6e2ea2cc
0x6e2ea2ce
0x6e2ea2d0
0x6e2ea2d2
0x6e2ea2d4
0x6e2ea2d6
0x6e2ea2d8
0x6e2ea2da
0x6e2ea2dc
0x6e2ea2de
0x6e2ea2e0
0x6e2ea2e2
0x6e2ea2e4
0x6e2ea2e6
0x6e2ea2e8
0x6e2ea2ea
0x6e2ea2ec
0x6e2ea2ee
0x6e2ea2f0
0x6e2ea2f2
0x6e2ea2f4
0x6e2ea2f6
0x6e2ea2f8
0x6e2ea2fa
0x6e2ea2fc
0x6e2ea2fe
0x6e2ea300
0x6e2ea302
0x6e2ea304
0x6e2ea306
0x6e2ea308
0x6e2ea30a
0x6e2ea30c
0x6e2ea30e
0x6e2ea310
0x6e2ea312
0x6e2ea314
0x6e2ea316
0x6e2ea318
0x6e2ea31a
0x6e2ea31c
0x6e2ea31e
0x6e2ea320
0x6e2ea322
0x6e2ea324
0x6e2ea326
0x6e2ea328
0x6e2ea32a
0x6e2ea32c
0x6e2ea32e
0x6e2ea330
0x6e2ea332
0x6e2ea334
0x6e2ea336
0x6e2ea338
0x6e2ea33a
0x6e2ea33c
0x6e2ea33e
0x6e2ea340
0x6e2ea342
0x6e2ea344
0x6e2ea346
0x6e2ea348
0x6e2ea34a
0x6e2ea34c
0x6e2ea34e
0x6e2ea350
0x6e2ea352
0x6e2ea354
0x6e2ea356
0x6e2ea358
0x6e2ea35a
0x6e2ea35c
0x6e2ea35e
0x6e2ea360
0x6e2ea362
0x6e2ea364
0x6e2ea366
0x6e2ea368
0x6e2ea36a
0x6e2ea36c
0x6e2ea36e
0x6e2ea370
0x6e2ea372
0x6e2ea374
0x6e2ea376
0x6e2ea378
0x6e2ea37a
0x6e2ea37c
0x6e2ea37e
0x6e2ea380
0x6e2ea382
0x6e2ea384
0x6e2ea386
0x6e2ea388
0x6e2ea38a
0x6e2ea38c
0x6e2ea38e
0x6e2ea390
0x6e2ea392
0x6e2ea394
0x6e2ea396
0x6e2ea398
0x6e2ea39a
0x6e2ea39c
0x6e2ea39e
0x6e2ea3a0
0x6e2ea3a2
0x6e2ea3a4
0x6e2ea3a6
0x6e2ea3a8
0x6e2ea3aa
0x6e2ea3ac
0x6e2ea3ae
0x6e2ea3b0
0x6e2ea3b2
0x6e2ea3b4
0x6e2ea3b6
0x6e2ea3b8
0x6e2ea3ba
0x6e2ea3bc
0x6e2ea3be
0x6e2ea3c0
0x6e2ea3c2
0x6e2ea3c4
0x6e2ea3c6
0x6e2ea3c8
0x6e2ea3ca
0x6e2ea3cc
0x6e2ea3ce
0x6e2ea3d0
0x6e2ea3d2
0x6e2ea3d4
0x6e2ea3d6
0x6e2ea3d8
0x6e2ea3da
0x6e2ea3dc
0x6e2ea3de
0x6e2ea3e0
0x6e2ea3e2
0x6e2ea3e4
0x6e2ea3e6
0x6e2ea3e8
0x6e2ea3ea
0x6e2ea3ec
0x6e2ea3ee
0x6e2ea3f0
0x6e2ea3f2
0x6e2ea3f4
0x6e2ea3f6
0x6e2ea3f8
0x6e2ea3fa
0x6e2ea3fc
0x6e2ea3fe
0x6e2ea400
0x6e2ea402
0x6e2ea404
0x6e2ea406
0x6e2ea408
0x6e2ea40a
0x6e2ea40c
0x6e2ea40e
0x6e2ea410
0x6e2ea412
0x6e2ea414
0x6e2ea416
0x6e2ea418
0x6e2ea41a
0x6e2ea41c
0x6e2ea41e
0x6e2ea420
0x6e2ea422
0x6e2ea424
0x6e2ea426
0x6e2ea428
0x6e2ea42a
0x6e2ea42c
0x6e2ea42e
0x6e2ea430
0x6e2ea432
0x6e2ea434
0x6e2ea436
0x6e2ea438
0x6e2ea43a
0x6e2ea43c
0x6e2ea43e
0x6e2ea440
0x6e2ea442
0x6e2ea444
0x6e2ea446
0x6e2ea448
0x6e2ea44a
0x6e2ea44c
0x6e2ea44e
0x6e2ea450
0x6e2ea452
0x6e2ea454
0x6e2ea456
0x6e2ea458
0x6e2ea45a
0x6e2ea45c
0x6e2ea45e
0x6e2ea460
0x6e2ea462
0x6e2ea464
0x6e2ea466
0x6e2ea468
0x6e2ea46a
0x6e2ea46c
0x6e2ea46e
0x6e2ea470
0x6e2ea472
0x6e2ea474
0x6e2ea476
0x6e2ea478
0x6e2ea47a
0x6e2ea47c
0x6e2ea47e
0x6e2ea480
0x6e2ea482
0x6e2ea484
0x6e2ea486
0x6e2ea488
0x6e2ea48a
0x6e2ea48c
0x6e2ea48e
0x6e2ea490
0x6e2ea492
0x6e2ea494
0x6e2ea496
0x6e2ea498
0x6e2ea49a
0x6e2ea49c
0x6e2ea49e
0x6e2ea4a0
0x6e2ea4a2
0x6e2ea4a4
0x6e2ea4a6
0x6e2ea4a8
0x6e2ea4aa
0x6e2ea4ac
0x6e2ea4ae
0x6e2ea4b0
0x6e2ea4b2
0x6e2ea4b4
0x6e2ea4b6
0x6e2ea4b8
0x6e2ea4ba
0x6e2ea4bc
0x6e2ea4be
0x6e2ea4c0
0x6e2ea4c2
0x6e2ea4c4
0x6e2ea4c6
0x6e2ea4c8
0x6e2ea4ca
0x6e2ea4cc
0x6e2ea4ce
0x6e2ea4d0
0x6e2ea4d2
0x6e2ea4d4
0x6e2ea4d6
0x6e2ea4d8
0x6e2ea4da
0x6e2ea4dc
0x6e2ea4de
0x6e2ea4e0
0x6e2ea4e2
0x6e2ea4e4
0x6e2ea4e6
0x6e2ea4e8
0x6e2ea4ea
0x6e2ea4ec
0x6e2ea4ee
0x6e2ea4f0
0x6e2ea4f2
0x6e2ea4f4
0x6e2ea4f6
0x6e2ea4f8
0x6e2ea4fa
0x6e2ea4fc
0x6e2ea4fe
0x6e2ea500
0x6e2ea502
0x6e2ea504
0x6e2ea506
0x6e2ea508
0x6e2ea50a
0x6e2ea50c
0x6e2ea50e
0x6e2ea510
0x6e2ea512
0x6e2ea514
0x6e2ea516
0x6e2ea518
0x6e2ea51a
0x6e2ea51c
0x6e2ea51e
0x6e2ea520
0x6e2ea522
0x6e2ea524
0x6e2ea526
0x6e2ea528
0x6e2ea52a
0x6e2ea52c
0x6e2ea52e
0x6e2ea530
0x6e2ea532
0x6e2ea534
0x6e2ea536
0x6e2ea538
0x6e2ea53a
0x6e2ea53c
0x6e2ea53e
0x6e2ea540
0x6e2ea542
0x6e2ea544
0x6e2ea546
0x6e2ea548
0x6e2ea54a
0x6e2ea54c
0x6e2ea54e
0x6e2ea550
0x6e2ea552
0x6e2ea554
0x6e2ea556
0x6e2ea558
0x6e2ea55a
0x6e2ea55c
0x6e2ea55e
0x6e2ea560
0x6e2ea562
0x6e2ea564
0x6e2ea566
0x6e2ea568
0x6e2ea56a
0x6e2ea56c
0x6e2ea56e
0x6e2ea570
0x6e2ea572
0x6e2ea574
0x6e2ea576
0x6e2ea578
0x6e2ea57a
0x6e2ea57c
0x6e2ea57e
0x6e2ea580
0x6e2ea582
0x6e2ea584
0x6e2ea586
0x6e2ea588
0x6e2ea58a
0x6e2ea58c
0x6e2ea58e
0x6e2ea590
0x6e2ea592
0x6e2ea594
0x6e2ea596
0x6e2ea598
0x6e2ea59a
0x6e2ea59c
0x6e2ea59e
0x6e2ea5a0
0x6e2ea5a2
0x6e2ea5a4
0x6e2ea5a6
0x6e2ea5a8
0x6e2ea5aa
0x6e2ea5ac
0x6e2ea5ae
0x6e2ea5b0
0x6e2ea5b2
0x6e2ea5b4
0x6e2ea5b6
0x6e2ea5b8
0x6e2ea5ba
0x6e2ea5bc
0x6e2ea5be
0x6e2ea5c0
0x6e2ea5c2
0x6e2ea5c4
0x6e2ea5c6
0x6e2ea5c8
0x6e2ea5ca
0x6e2ea5cc
0x6e2ea5ce
0x6e2ea5d0
0x6e2ea5d2
0x6e2ea5d4
0x6e2ea5d6
0x6e2ea5d8
0x6e2ea5da
0x6e2ea5dc
0x6e2ea5de
0x6e2ea5e0
0x6e2ea5e2
0x6e2ea5e4
0x6e2ea5e6
0x6e2ea5e8
0x6e2ea5ea
0x6e2ea5ec
0x6e2ea5ee
0x6e2ea5f0
0x6e2ea5f2
0x6e2ea5f4
0x6e2ea5f6
0x6e2ea5f8
0x6e2ea5fa
0x6e2ea5fc
0x6e2ea5fe
0x6e2ea600
0x6e2ea602
0x6e2ea604
0x6e2ea606
0x6e2ea608
0x6e2ea60a
0x6e2ea60c
0x6e2ea60e
0x6e2ea610
0x6e2ea612
0x6e2ea614
0x6e2ea616
0x6e2ea618
0x6e2ea61a
0x6e2ea61c
0x6e2ea61e
0x6e2ea620
0x6e2ea622
0x6e2ea624
0x6e2ea626
0x6e2ea628
0x6e2ea62a
0x6e2ea62c
0x6e2ea62e
0x6e2ea630
0x6e2ea632
0x6e2ea634
0x6e2ea636
0x6e2ea638
0x6e2ea63a
0x6e2ea63c
0x6e2ea63e
0x6e2ea640
0x6e2ea642
0x6e2ea644
0x6e2ea646
0x6e2ea648
0x6e2ea64a
0x6e2ea64c
0x6e2ea64e
0x6e2ea650
0x6e2ea652
0x6e2ea654
0x6e2ea656
0x6e2ea658
0x6e2ea65a
0x6e2ea65c
0x6e2ea65e
0x6e2ea660
0x6e2ea662
0x6e2ea664
0x6e2ea666
0x6e2ea668
0x6e2ea66a
0x6e2ea66c
0x6e2ea66e
0x6e2ea670
0x6e2ea672
0x6e2ea674
0x6e2ea676
0x6e2ea678
0x6e2ea67a
0x6e2ea67c
0x6e2ea67e
0x6e2ea680
0x6e2ea682
0x6e2ea684
0x6e2ea686
0x6e2ea688
0x6e2ea68a
0x6e2ea68c
0x6e2ea68e
0x6e2ea690
0x6e2ea692
0x6e2ea694
0x6e2ea696
0x6e2ea698
0x6e2ea69a
0x6e2ea69c
0x6e2ea69e
0x6e2ea6a0
0x6e2ea6a2
0x6e2ea6a4
0x6e2ea6a6
0x6e2ea6a8
0x6e2ea6aa
0x6e2ea6ac
0x6e2ea6ae
0x6e2ea6b0
0x6e2ea6b2
0x6e2ea6b4
0x6e2ea6b6
0x6e2ea6b8
0x6e2ea6ba
0x6e2ea6bc
0x6e2ea6be
0x6e2ea6c0
0x6e2ea6c2
0x6e2ea6c4
0x6e2ea6c6
0x6e2ea6c8
0x6e2ea6ca
0x6e2ea6cc
0x6e2ea6ce
0x6e2ea6d0
0x6e2ea6d2
0x6e2ea6d4
0x6e2ea6d6
0x6e2ea6d8
0x6e2ea6da
0x6e2ea6dc
0x6e2ea6de
0x6e2ea6e0
0x6e2ea6e2
0x6e2ea6e4
0x6e2ea6e6
0x6e2ea6e8
0x6e2ea6ea
0x6e2ea6ec
0x6e2ea6ee
0x6e2ea6f0
0x6e2ea6f2
0x6e2ea6f4
0x6e2ea6f6
0x6e2ea6f8
0x6e2ea6fa
0x6e2ea6fc
0x6e2ea6fe
0x6e2ea700
0x6e2ea702
0x6e2ea704
0x6e2ea706
0x6e2ea708
0x6e2ea70a
0x6e2ea70c
0x6e2ea70e
0x6e2ea710
0x6e2ea712
0x6e2ea714
0x6e2ea716
0x6e2ea718
0x6e2ea71a
0x6e2ea71c
0x6e2ea71e
0x6e2ea720
0x6e2ea722
0x6e2ea724
0x6e2ea726
0x6e2ea728
0x6e2ea72a
0x6e2ea72c
0x6e2ea72e
0x6e2ea730
0x6e2ea732
0x6e2ea734
0x6e2ea736
0x6e2ea738
0x6e2ea73a
0x6e2ea73c
0x6e2ea73e
0x6e2ea740
0x6e2ea742
0x6e2ea744
0x6e2ea746
0x6e2ea748
0x6e2ea74a
0x6e2ea74c
0x6e2ea74e
0x6e2ea750
0x6e2ea752
0x6e2ea754
0x6e2ea756
0x6e2ea758
0x6e2ea75a
0x6e2ea75c
0x6e2ea75e
0x6e2ea760
0x6e2ea762
0x6e2ea764
0x6e2ea766
0x6e2ea768
0x6e2ea76a
0x6e2ea76c
0x6e2ea76e
0x6e2ea770
0x6e2ea772
0x6e2ea774
0x6e2ea776
0x6e2ea778
0x6e2ea77a
0x6e2ea77c
0x6e2ea77e
0x6e2ea780
0x6e2ea782
0x6e2ea784
0x6e2ea786
0x6e2ea788
0x6e2ea78a
0x6e2ea78c
0x6e2ea78e
0x6e2ea790
0x6e2ea792
0x6e2ea794
0x6e2ea796
0x6e2ea798
0x6e2ea79a
0x6e2ea79c
0x6e2ea79e
0x6e2ea7a0
0x6e2ea7a2
0x6e2ea7a4
0x6e2ea7a6
0x6e2ea7a8
0x6e2ea7aa
0x6e2ea7ac
0x6e2ea7ae
0x6e2ea7b0
0x6e2ea7b2
0x6e2ea7b4
0x6e2ea7b6
0x6e2ea7b8
0x6e2ea7ba
0x6e2ea7bc
0x6e2ea7be
0x6e2ea7c0
0x6e2ea7c2
0x6e2ea7c4
0x6e2ea7c6
0x6e2ea7c8
0x6e2ea7ca
0x6e2ea7cc
0x6e2ea7ce
0x6e2ea7d0
0x6e2ea7d2
0x6e2ea7d4
0x6e2ea7d6
0x6e2ea7d8
0x6e2ea7da
0x6e2ea7dc
0x6e2ea7de
0x6e2ea7e0
0x6e2ea7e2
0x6e2ea7e4
0x6e2ea7e6
0x6e2ea7e8
0x6e2ea7ea
0x6e2ea7ec
0x6e2ea7ee
0x6e2ea7f0
0x6e2ea7f2
0x6e2ea7f4
0x6e2ea7f6
0x6e2ea7f8
0x6e2ea7fa
0x6e2ea7fc
0x6e2ea7fe
0x6e2ea800
0x6e2ea802
0x6e2ea804
0x6e2ea806
0x6e2ea808
0x6e2ea80a
0x6e2ea80c
0x6e2ea80e
0x6e2ea810
0x6e2ea812
0x6e2ea814
0x6e2ea816
0x6e2ea818
0x6e2ea81a
0x6e2ea81c
0x6e2ea81e
0x6e2ea820
0x6e2ea822
0x6e2ea824
0x6e2ea826
0x6e2ea828
0x6e2ea82a
0x6e2ea82c
0x6e2ea82e
0x6e2ea830
0x6e2ea832
0x6e2ea834
0x6e2ea836
0x6e2ea838
0x6e2ea83a
0x6e2ea83c
0x6e2ea83e
0x6e2ea840
0x6e2ea842
0x6e2ea844
0x6e2ea846
0x6e2ea848
0x6e2ea84a
0x6e2ea84c
0x6e2ea84e
0x6e2ea850
0x6e2ea852
0x6e2ea854
0x6e2ea856
0x6e2ea858
0x6e2ea85a
0x6e2ea85c
0x6e2ea85e
0x6e2ea860
0x6e2ea862
0x6e2ea864
0x6e2ea866
0x6e2ea868
0x6e2ea86a
0x6e2ea86c
0x6e2ea86e
0x6e2ea870
0x6e2ea872
0x6e2ea874
0x6e2ea876
0x6e2ea878
0x6e2ea87a
0x6e2ea87c
0x6e2ea87e
0x6e2ea880
0x6e2ea882
0x6e2ea884
0x6e2ea886
0x6e2ea888
0x6e2ea88a
0x6e2ea88c
0x6e2ea88e
0x6e2ea890
0x6e2ea892
0x6e2ea894
0x6e2ea896
0x6e2ea898
0x6e2ea89a
0x6e2ea89c
0x6e2ea89e
0x6e2ea8a0
0x6e2ea8a2
0x6e2ea8a4
0x6e2ea8a6
0x6e2ea8a8
0x6e2ea8aa
0x6e2ea8ac
0x6e2ea8ae
0x6e2ea8b0
0x6e2ea8b2
0x6e2ea8b4
0x6e2ea8b6
0x6e2ea8b8
0x6e2ea8ba
0x6e2ea8bc
0x6e2ea8be
0x6e2ea8c0
0x6e2ea8c2
0x6e2ea8c4
0x6e2ea8c6
0x6e2ea8c8
0x6e2ea8ca
0x6e2ea8cc
0x6e2ea8ce
0x6e2ea8d0
0x6e2ea8d2
0x6e2ea8d4
0x6e2ea8d6
0x6e2ea8d8
0x6e2ea8da
0x6e2ea8dc
0x6e2ea8de
0x6e2ea8e0
0x6e2ea8e2
0x6e2ea8e4
0x6e2ea8e6
0x6e2ea8e8
0x6e2ea8ea
0x6e2ea8ec
0x6e2ea8ee
0x6e2ea8f0
0x6e2ea8f2
0x6e2ea8f4
0x6e2ea8f6
0x6e2ea8f8
0x6e2ea8fa
0x6e2ea8fc
0x6e2ea8fe
0x6e2ea900
0x6e2ea902
0x6e2ea904
0x6e2ea906
0x6e2ea908
0x6e2ea90a
0x6e2ea90c
0x6e2ea90e
0x6e2ea910
0x6e2ea912
0x6e2ea914
0x6e2ea916
0x6e2ea918
0x6e2ea91a
0x6e2ea91c
0x6e2ea91e
0x6e2ea920
0x6e2ea922
0x6e2ea924
0x6e2ea926
0x6e2ea928
0x6e2ea92a
0x6e2ea92c
0x6e2ea92e
0x6e2ea930
0x6e2ea932
0x6e2ea934
0x6e2ea936
0x6e2ea938
0x6e2ea93a
0x6e2ea93c
0x6e2ea93e
0x6e2ea940
0x6e2ea942
0x6e2ea944
0x6e2ea946
0x6e2ea948
0x6e2ea94a
0x6e2ea94c
0x6e2ea94e
0x6e2ea950
0x6e2ea952
0x6e2ea954
0x6e2ea956
0x6e2ea958
0x6e2ea95a
0x6e2ea95c
0x6e2ea95e
0x6e2ea960
0x6e2ea962
0x6e2ea964
0x6e2ea966
0x6e2ea968
0x6e2ea96a
0x6e2ea96c
0x6e2ea96e
0x6e2ea970
0x6e2ea972
0x6e2ea974
0x6e2ea976
0x6e2ea978
0x6e2ea97a
0x6e2ea97c
0x6e2ea97e
0x6e2ea980
0x6e2ea982
0x6e2ea984
0x6e2ea986
0x6e2ea988
0x6e2ea98a
0x6e2ea98c
0x6e2ea98e
0x6e2ea990
0x6e2ea992
0x6e2ea994
0x6e2ea996
0x6e2ea998
0x6e2ea99a
0x6e2ea99c
0x6e2ea99e
0x6e2ea9a0
0x6e2ea9a2
0x6e2ea9a4
0x6e2ea9a6
0x6e2ea9a8
0x6e2ea9aa
0x6e2ea9ac
0x6e2ea9ae
0x6e2ea9b0
0x6e2ea9b2
0x6e2ea9b4
0x6e2ea9b6
0x6e2ea9b8
0x6e2ea9ba
0x6e2ea9bc
0x6e2ea9be
0x6e2ea9c0
0x6e2ea9c2
0x6e2ea9c4
0x6e2ea9c6
0x6e2ea9c8
0x6e2ea9ca
0x6e2ea9cc
0x6e2ea9ce
0x6e2ea9d0
0x6e2ea9d2
0x6e2ea9d4
0x6e2ea9d6
0x6e2ea9d8
0x6e2ea9da
0x6e2ea9dc
0x6e2ea9de
0x6e2ea9e0
0x6e2ea9e2
0x6e2ea9e4
0x6e2ea9e6
0x6e2ea9e8
0x6e2ea9ea
0x6e2ea9ec
0x6e2ea9ee
0x6e2ea9f0
0x6e2ea9f2
0x6e2ea9f4
0x6e2ea9f6
0x6e2ea9f8
0x6e2ea9fa
0x6e2ea9fc
0x6e2ea9fe
0x6e2eaa00
0x6e2eaa02
0x6e2eaa04
0x6e2eaa06
0x6e2eaa08
0x6e2eaa0a
0x6e2eaa0c
0x6e2eaa0e
0x6e2eaa10
0x6e2eaa12
0x6e2eaa14
0x6e2eaa16
0x6e2eaa18
0x6e2eaa1a
0x6e2eaa1c
0x6e2eaa1e
0x6e2eaa20
0x6e2eaa22
0x6e2eaa24
0x6e2eaa26
0x6e2eaa28
0x6e2eaa2a
0x6e2eaa2c
0x6e2eaa2e
0x6e2eaa30
0x6e2eaa32
0x6e2eaa34
0x6e2eaa36
0x6e2eaa38
0x6e2eaa3a
0x6e2eaa3c
0x6e2eaa3e
0x6e2eaa40
0x6e2eaa42
0x6e2eaa44
0x6e2eaa46
0x6e2eaa48
0x6e2eaa4a
0x6e2eaa4c
0x6e2eaa4e
0x6e2eaa50
0x6e2eaa52
0x6e2eaa54
0x6e2eaa56
0x6e2eaa58
0x6e2eaa5a
0x6e2eaa5c
0x6e2eaa5e
0x6e2eaa60
0x6e2eaa62
0x6e2eaa64
0x6e2eaa66
0x6e2eaa68
0x6e2eaa6a
0x6e2eaa6c
0x6e2eaa6e
0x6e2eaa70
0x6e2eaa72
0x6e2eaa74
0x6e2eaa76
0x6e2eaa78
0x6e2eaa7a
0x6e2eaa7c
0x6e2eaa7e
0x6e2eaa80
0x6e2eaa82
0x6e2eaa84
0x6e2eaa86
0x6e2eaa88
0x6e2eaa8a
0x6e2eaa8c
0x6e2eaa8e
0x6e2eaa90
0x6e2eaa92
0x6e2eaa94
0x6e2eaa96
0x6e2eaa98
0x6e2eaa9a
0x6e2eaa9c
0x6e2eaa9e
0x6e2eaaa0
0x6e2eaaa2
0x6e2eaaa4
0x6e2eaaa6
0x6e2eaaa8
0x6e2eaaaa
0x6e2eaaac
0x6e2eaaae
0x6e2eaab0
0x6e2eaab2
0x6e2eaab4
0x6e2eaab6
0x6e2eaab8
0x6e2eaaba
0x6e2eaabc
0x6e2eaabe
0x6e2eaac0
0x6e2eaac2
0x6e2eaac4
0x6e2eaac6
0x6e2eaac8
0x6e2eaaca
0x6e2eaacc
0x6e2eaace
0x6e2eaad0
0x6e2eaad2
0x6e2eaad4
0x6e2eaad6
0x6e2eaad8
0x6e2eaada
0x6e2eaadc
0x6e2eaade
0x6e2eaae0
0x6e2eaae2
0x6e2eaae4
0x6e2eaae6
0x6e2eaae8
0x6e2eaaea
0x6e2eaaec
0x6e2eaaee
0x6e2eaaf0
0x6e2eaaf2
0x6e2eaaf4
0x6e2eaaf6
0x6e2eaaf8
0x6e2eaafa
0x6e2eaafc
0x6e2eaafe
0x6e2eab00
0x6e2eab02
0x6e2eab04
0x6e2eab06
0x6e2eab08
0x6e2eab0a
0x6e2eab0c
0x6e2eab0e
0x6e2eab10
0x6e2eab12
0x6e2eab14
0x6e2eab16
0x6e2eab18
0x6e2eab1a
0x6e2eab1c
0x6e2eab1e
0x6e2eab20
0x6e2eab22
0x6e2eab24
0x6e2eab26
0x6e2eab28
0x6e2eab2a
0x6e2eab2c
0x6e2eab2e
0x6e2eab30
0x6e2eab32
0x6e2eab34
0x6e2eab36
0x6e2eab38
0x6e2eab3a
0x6e2eab3c
0x6e2eab3e
0x6e2eab40
0x6e2eab42
0x6e2eab44
0x6e2eab46
0x6e2eab48
0x6e2eab4a
0x6e2eab4c
0x6e2eab4e
0x6e2eab50
0x6e2eab52
0x6e2eab54
0x6e2eab56
0x6e2eab58
0x6e2eab5a
0x6e2eab5c
0x6e2eab5e
0x6e2eab60
0x6e2eab62
0x6e2eab64
0x6e2eab66
0x6e2eab68
0x6e2eab6a
0x6e2eab6c
0x6e2eab6e
0x6e2eab70
0x6e2eab72
0x6e2eab74
0x6e2eab76
0x6e2eab78
0x6e2eab7a
0x6e2eab7c
0x6e2eab7e
0x6e2eab80
0x6e2eab82
0x6e2eab84
0x6e2eab86
0x6e2eab88
0x6e2eab8a
0x6e2eab8c
0x6e2eab8e
0x6e2eab90
0x6e2eab92
0x6e2eab94
0x6e2eab96
0x6e2eab98
0x6e2eab9a
0x6e2eab9c
0x6e2eab9e
0x6e2eaba0
0x6e2eaba2
0x6e2eaba4
0x6e2eaba6
0x6e2eaba8
0x6e2eabaa
0x6e2eabac
0x6e2eabae
0x6e2eabb0
0x6e2eabb2
0x6e2eabb4
0x6e2eabb6
0x6e2eabb8
0x6e2eabba
0x6e2eabbc
0x6e2eabbe
0x6e2eabc0
0x6e2eabc2
0x6e2eabc4
0x6e2eabc6
0x6e2eabc8
0x6e2eabca
0x6e2eabcc
0x6e2eabce
0x6e2eabd0
0x6e2eabd2
0x6e2eabd4
0x6e2eabd6
0x6e2eabd8
0x6e2eabda
0x6e2eabdc
0x6e2eabde
0x6e2eabe0
0x6e2eabe2
0x6e2eabe4
0x6e2eabe6
0x6e2eabe8
0x6e2eabea
0x6e2eabec
0x6e2eabee
0x6e2eabf0
0x6e2eabf2
0x6e2eabf4
0x6e2eabf6
0x6e2eabf8
0x6e2eabfa
0x6e2eabfc
0x6e2eabfe
0x6e2eac00
0x6e2eac02
0x6e2eac04
0x6e2eac06
0x6e2eac08
0x6e2eac0a
0x6e2eac0c
0x6e2eac0e
0x6e2eac10
0x6e2eac12
0x6e2eac14
0x6e2eac16
0x6e2eac18
0x6e2eac1a
0x6e2eac1c
0x6e2eac1e
0x6e2eac20
0x6e2eac22
0x6e2eac24
0x6e2eac26
0x6e2eac28
0x6e2eac2a
0x6e2eac2c
0x6e2eac2e
0x6e2eac30
0x6e2eac32
0x6e2eac34
0x6e2eac36
0x6e2eac38
0x6e2eac3a
0x6e2eac3c
0x6e2eac3e
0x6e2eac40
0x6e2eac42
0x6e2eac44
0x6e2eac46
0x6e2eac48
0x6e2eac4a
0x6e2eac4c
0x6e2eac4e
0x6e2eac50
0x6e2eac52
0x6e2eac54
0x6e2eac56
0x6e2eac58
0x6e2eac5a
0x6e2eac5c
0x6e2eac5e
0x6e2eac60
0x6e2eac62
0x6e2eac64
0x6e2eac66
0x6e2eac68
0x6e2eac6a
0x6e2eac6c
0x6e2eac6e
0x6e2eac70
0x6e2eac72
0x6e2eac74
0x6e2eac76
0x6e2eac78
0x6e2eac7a
0x6e2eac7c
0x6e2eac7e
0x6e2eac80
0x6e2eac82
0x6e2eac84
0x6e2eac86
0x6e2eac88
0x6e2eac8a
0x6e2eac8c
0x6e2eac8e
0x6e2eac90
0x6e2eac92
0x6e2eac94
0x6e2eac96
0x6e2eac98
0x6e2eac9a
0x6e2eac9c
0x6e2eac9e
0x6e2eaca0
0x6e2eaca2
0x6e2eaca4
0x6e2eaca6
0x6e2eaca8
0x6e2eacaa
0x6e2eacac
0x6e2eacae
0x6e2eacb0
0x6e2eacb2
0x6e2eacb4
0x6e2eacb6
0x6e2eacb8
0x6e2eacba
0x6e2eacbc
0x6e2eacbe
0x6e2eacc0
0x6e2eacc2
0x6e2eacc4
0x6e2eacc6
0x6e2eacc8
0x6e2eacca
0x6e2eaccc
0x6e2eacce
0x6e2eacd0
0x6e2eacd2
0x6e2eacd4
0x6e2eacd6
0x6e2eacd8
0x6e2eacda
0x6e2eacdc
0x6e2eacde
0x6e2eace0
0x6e2eace2
0x6e2eace4
0x6e2eace6
0x6e2eace8
0x6e2eacea
0x6e2eacec
0x6e2eacee
0x6e2eacf0
0x6e2eacf2
0x6e2eacf4
0x6e2eacf6
0x6e2eacf8
0x6e2eacfa
0x6e2eacfc
0x6e2eacfe
0x6e2ead00
0x6e2ead02
0x6e2ead04
0x6e2ead06
0x6e2ead08
0x6e2ead0a
0x6e2ead0c
0x6e2ead0e
0x6e2ead10
0x6e2ead12
0x6e2ead14
0x6e2ead16
0x6e2ead18
0x6e2ead1a
0x6e2ead1c
0x6e2ead1e
0x6e2ead20
0x6e2ead22
0x6e2ead24
0x6e2ead26
0x6e2ead28
0x6e2ead2a
0x6e2ead2c
0x6e2ead2e
0x6e2ead30
0x6e2ead32
0x6e2ead34
0x6e2ead36
0x6e2ead38
0x6e2ead3a
0x6e2ead3c
0x6e2ead3e
0x6e2ead40
0x6e2ead42
0x6e2ead44
0x6e2ead46
0x6e2ead48
0x6e2ead4a
0x6e2ead4c
0x6e2ead4e
0x6e2ead50
0x6e2ead52
0x6e2ead54
0x6e2ead56
0x6e2ead58
0x6e2ead5a
0x6e2ead5c
0x6e2ead5e
0x6e2ead60
0x6e2ead62
0x6e2ead64
0x6e2ead66
0x6e2ead68
0x6e2ead6a
0x6e2ead6c
0x6e2ead6e
0x6e2ead70
0x6e2ead72
0x6e2ead74
0x6e2ead76
0x6e2ead78
0x6e2ead7a
0x6e2ead7c
0x6e2ead7e
0x6e2ead80
0x6e2ead82
0x6e2ead84
0x6e2ead86
0x6e2ead88
0x6e2ead8a
0x6e2ead8c
0x6e2ead8e
0x6e2ead90
0x6e2ead92
0x6e2ead94
0x6e2ead96
0x6e2ead98
0x6e2ead9a
0x6e2ead9c
0x6e2ead9e
0x6e2eada0
0x6e2eada2
0x6e2eada4
0x6e2eada6
0x6e2eada8
0x6e2eadaa
0x6e2eadac
0x6e2eadae
0x6e2eadb0
0x6e2eadb2
0x6e2eadb4
0x6e2eadb6
0x6e2eadb8
0x6e2eadba
0x6e2eadbc
0x6e2eadbe
0x6e2eadc0
0x6e2eadc2
0x6e2eadc4
0x6e2eadc6
0x6e2eadc8
0x6e2eadca
0x6e2eadcc
0x6e2eadce
0x6e2eadd0
0x6e2eadd2
0x6e2eadd4
0x6e2eadd6
0x6e2eadd8
0x6e2eadda
0x6e2eaddc
0x6e2eadde
0x6e2eade0
0x6e2eade2
0x6e2eade4
0x6e2eade6
0x6e2eade8
0x6e2eadea
0x6e2eadec
0x6e2eadee
0x6e2eadf0
0x6e2eadf2
0x6e2eadf4
0x6e2eadf6
0x6e2eadf8
0x6e2eadfa
0x6e2eadfc
0x6e2eadfe
0x6e2eae00
0x6e2eae02
0x6e2eae04
0x6e2eae06
0x6e2eae08
0x6e2eae0a
0x6e2eae0c
0x6e2eae0e
0x6e2eae10
0x6e2eae12
0x6e2eae14
0x6e2eae16
0x6e2eae18
0x6e2eae1a
0x6e2eae1c
0x6e2eae1e
0x6e2eae20
0x6e2eae22
0x6e2eae24
0x6e2eae26
0x6e2eae28
0x6e2eae2a
0x6e2eae2c
0x6e2eae2e
0x6e2eae30
0x6e2eae32
0x6e2eae34
0x6e2eae36
0x6e2eae38
0x6e2eae3a
0x6e2eae3c
0x6e2eae3e
0x6e2eae40
0x6e2eae42
0x6e2eae44
0x6e2eae46
0x6e2eae48
0x6e2eae4a
0x6e2eae4c
0x6e2eae4e
0x6e2eae50
0x6e2eae52
0x6e2eae54
0x6e2eae56
0x6e2eae58
0x6e2eae5a
0x6e2eae5c
0x6e2eae5e
0x6e2eae60
0x6e2eae62
0x6e2eae64
0x6e2eae66
0x6e2eae68
0x6e2eae6a
0x6e2eae6c
0x6e2eae6e
0x6e2eae70
0x6e2eae72
0x6e2eae74
0x6e2eae76
0x6e2eae78
0x6e2eae7a
0x6e2eae7c
0x6e2eae7e
0x6e2eae80
0x6e2eae82
0x6e2eae84
0x6e2eae86
0x6e2eae88
0x6e2eae8a
0x6e2eae8c
0x6e2eae8e
0x6e2eae90
0x6e2eae92
0x6e2eae94
0x6e2eae96
0x6e2eae98
0x6e2eae9a
0x6e2eae9c
0x6e2eae9e
0x6e2eaea0
0x6e2eaea2
0x6e2eaea4
0x6e2eaea6
0x6e2eaea8
0x6e2eaeaa
0x6e2eaeac
0x6e2eaeae
0x6e2eaeb0
0x6e2eaeb2
0x6e2eaeb4
0x6e2eaeb6
0x6e2eaeb8
0x6e2eaeba
0x6e2eaebc
0x6e2eaebe
0x6e2eaec0
0x6e2eaec2
0x6e2eaec4
0x6e2eaec6
0x6e2eaec8
0x6e2eaeca
0x6e2eaecc
0x6e2eaece
0x6e2eaed0
0x6e2eaed2
0x6e2eaed4
0x6e2eaed6
0x6e2eaed8
0x6e2eaeda
0x6e2eaedc
0x6e2eaede
0x6e2eaee0
0x6e2eaee2
0x6e2eaee4
0x6e2eaee6
0x6e2eaee8
0x6e2eaeea
0x6e2eaeec
0x6e2eaeee
0x6e2eaef0
0x6e2eaef2
0x6e2eaef4
0x6e2eaef6
0x6e2eaef8
0x6e2eaefa
0x6e2eaefc
0x6e2eaefe
0x6e2eaf00
0x6e2eaf02
0x6e2eaf04
0x6e2eaf06
0x6e2eaf08
0x6e2eaf0a
0x6e2eaf0c
0x6e2eaf0e
0x6e2eaf10
0x6e2eaf12
0x6e2eaf14
0x6e2eaf16
0x6e2eaf18
0x6e2eaf1a
0x6e2eaf1c
0x6e2eaf1e
0x6e2eaf20
0x6e2eaf22
0x6e2eaf24
0x6e2eaf26
0x6e2eaf28
0x6e2eaf2a
0x6e2eaf2c
0x6e2eaf2e
0x6e2eaf30
0x6e2eaf32
0x6e2eaf34
0x6e2eaf36
0x6e2eaf38
0x6e2eaf3a
0x6e2eaf3c
0x6e2eaf3e
0x6e2eaf40
0x6e2eaf42
0x6e2eaf44
0x6e2eaf46
0x6e2eaf48
0x6e2eaf4a
0x6e2eaf4c
0x6e2eaf4e
0x6e2eaf50
0x6e2eaf52
0x6e2eaf54
0x6e2eaf56
0x6e2eaf58
0x6e2eaf5a
0x6e2eaf5c
0x6e2eaf5e
0x6e2eaf60
0x6e2eaf62
0x6e2eaf64
0x6e2eaf66
0x6e2eaf68
0x6e2eaf6a
0x6e2eaf6c
0x6e2eaf6e
0x6e2eaf70
0x6e2eaf72
0x6e2eaf74
0x6e2eaf76
0x6e2eaf78
0x6e2eaf7a
0x6e2eaf7c
0x6e2eaf7e
0x6e2eaf80
0x6e2eaf82
0x6e2eaf84
0x6e2eaf86
0x6e2eaf88
0x6e2eaf8a
0x6e2eaf8c
0x6e2eaf8e
0x6e2eaf90
0x6e2eaf92
0x6e2eaf94
0x6e2eaf96
0x6e2eaf98
0x6e2eaf9a
0x6e2eaf9c
0x6e2eaf9e
0x6e2eafa0
0x6e2eafa2
0x6e2eafa4
0x6e2eafa6
0x6e2eafa8
0x6e2eafaa
0x6e2eafac
0x6e2eafae
0x6e2eafb0
0x6e2eafb2
0x6e2eafb4
0x6e2eafb6
0x6e2eafb8
0x6e2eafba
0x6e2eafbc
0x6e2eafbe
0x6e2eafc0
0x6e2eafc2
0x6e2eafc4
0x6e2eafc6
0x6e2eafc8
0x6e2eafca
0x6e2eafcc
0x6e2eafce
0x6e2eafd0
0x6e2eafd2
0x6e2eafd4
0x6e2eafd6
0x6e2eafd8
0x6e2eafda
0x6e2eafdc
0x6e2eafde
0x6e2eafe0
0x6e2eafe2
0x6e2eafe4
0x6e2eafe6
0x6e2eafe8
0x6e2eafea
0x6e2eafec
0x6e2eafee
0x6e2eaff0
0x6e2eaff2
0x6e2eaff4
0x6e2eaff6
0x6e2eaff8
0x6e2eaffa
0x6e2eaffc
0x6e2eaffe
0x6e2eaffe
0x6e2eb000
0x6e2eb001
0x6e2eb064
0x6e2eb064
0x6e2eb067
0x00000000
0x00000000
0x00000000
0x00000000
0x6e2eb003
0x6e2eb003
0x6e2eb034
0x6e2eb034
0x6e2eb035
0x00000000
0x6e2eb037
0x6e2eb037
0x00000000
0x6e2eb037
0x6e2eb005
0x6e2eb005
0x6e2eb074
0x6e2eb074
0x00000000
0x6e2eb007
0x6e2eb007
0x6e2eb038
0x6e2eb038
0x6e2eb069
0x6e2eb069
0x00000000
0x6e2eb06c
0x6e2eb06c
0x6e2eb071
0x6e2eb071
0x00000000
0x6e2eb071
0x6e2eb03a
0x6e2eb03a
0x6e2eb0a5
0x6e2eb0c7
0x6e2eb0c7
0x00000000
0x6e2eb0a7
0x6e2eb0a7
0x6e2eb0aa
0x6e2eb0ac
0x6e2eb0ac
0x6e2eb0ad
0x00000000
0x6e2eb0af
0x6e2eb0af
0x00000000
0x6e2eb0b2
0x6e2eb0b2
0x6e2eb0b2
0x00000000
0x6e2eb0b2
0x6e2eb0af
0x6e2eb0ad
0x6e2eb03c
0x6e2eb03c
0x6e2eb03d
0x6e2eb0b3
0x6e2eb0b3
0x6e2eb0b4
0x00000000
0x6e2eb03f
0x6e2eb03f
0x6e2eb044
0x6e2eb075
0x6e2eb075
0x6e2eb07a
0x6e2eb07b
0x6e2eb07c
0x6e2eb07d
0x6e2eb07d
0x6e2eb07e
0x6e2eb07f
0x00000000
0x6e2eb046
0x6e2eb046
0x6e2eb0ba
0x6e2eb0ba
0x6e2eb0be
0x6e2eb0be
0x6e2eb048
0x6e2eb048
0x6e2eb04a
0x6e2eb04d
0x6e2eb0b8
0x6e2eb0b8
0x6e2eb0b8
0x00000000
0x6e2eb04f
0x6e2eb04f
0x6e2eb080
0x6e2eb080
0x6e2eb081
0x6e2eb082
0x6e2eb083
0x6e2eb085
0x6e2eb089
0x6e2eb089
0x6e2eb08b
0x6e2eb08e
0x00000000
0x6e2eb090
0x6e2eb090
0x00000000
0x6e2eb093
0x6e2eb093
0x6e2eb0b5
0x6e2eb0b5
0x6e2eb0b5
0x6e2eb0b5
0x00000000
0x6e2eb095
0x6e2eb095
0x6e2eb095
0x6e2eb097
0x6e2eb097
0x6e2eb09a
0x00000000
0x6e2eb09c
0x6e2eb09c
0x6e2eb09c
0x6e2eb0a0
0x6e2eb0a0
0x6e2eb0a0
0x6e2eb0a0
0x6e2eb09a
0x6e2eb093
0x6e2eb090
0x6e2eb052
0x6e2eb052
0x6e2eb054
0x6e2eb056
0x6e2eb056
0x6e2eb056
0x6e2eb059
0x6e2eb0cd
0x6e2eb0cd
0x6e2eb0ce
0x6e2eb0ce
0x6e2eb0d2
0x6e2eb0d2
0x6e2eb0d7
0x6e2eb0d7
0x6e2eb0d7
0x6e2eb0da
0x6e2eb0fc
0x6e2eb0fc
0x6e2eb0fd
0x00000000
0x6e2eb0ff
0x6e2eb0ff
0x00000000
0x6e2eb101
0x6e2eb101
0x00000000
0x00000000
0x00000000
0x00000000
0x6e2eb101
0x6e2eb0ff
0x6e2eb0dc
0x6e2eb0e3
0x6e2eb0e4
0x6e2eb0e9
0x6e2eb0e9
0x6e2eb0e9
0x6e2eb0eb
0x6e2eb0f0
0x6e2eb12f
0x6e2eb12f
0x6e2eb130
0x6e2eb130
0x6e2eb0f2
0x6e2eb0f2
0x6e2eb0f2
0x6e2eb0f2
0x6e2eb0f7
0x6e2eb103
0x6e2eb103
0x6e2eb134
0x00000000
0x6e2eb136
0x6e2eb136
0x00000000
0x6e2eb138
0x6e2eb138
0x6e2eb139
0x00000000
0x6e2eb13b
0x6e2eb13b
0x6e2eb140
0x00000000
0x6e2eb142
0x6e2eb142
0x6e2eb1b6
0x6e2eb1b6
0x00000000
0x6e2eb144
0x6e2eb144
0x6e2eb146
0x00000000
0x6e2eb148
0x6e2eb148
0x00000000
0x6e2eb148
0x6e2eb146
0x6e2eb142
0x6e2eb140
0x6e2eb139
0x6e2eb136
0x6e2eb105
0x6e2eb105
0x6e2eb108
0x6e2eb109
0x6e2eb10b
0x6e2eb10c
0x6e2eb10c
0x6e2eb10e
0x6e2eb10e
0x6e2eb111
0x6e2eb149
0x6e2eb149
0x6e2eb14a
0x6e2eb14d
0x6e2eb14f
0x6e2eb151
0x6e2eb151
0x6e2eb153
0x00000000
0x00000000
0x00000000
0x00000000
0x6e2eb113
0x6e2eb113
0x6e2eb115
0x6e2eb115
0x6e2eb115
0x6e2eb11b
0x6e2eb120
0x6e2eb122
0x6e2eb122
0x6e2eb123
0x6e2eb123
0x6e2eb126
0x6e2eb126
0x6e2eb155
0x6e2eb155
0x6e2eb156
0x6e2eb157
0x6e2eb15a
0x00000000
0x6e2eb15c
0x6e2eb15c
0x6e2eb15e
0x6e2eb15e
0x00000000
0x6e2eb15e
0x6e2eb128
0x6e2eb128
0x6e2eb160
0x6e2eb160
0x6e2eb1ce
0x6e2eb1ce
0x6e2eb1d7
0x6e2eb1da
0x6e2eb1db
0x6e2eb1db
0x6e2eb1df
0x6e2eb1e3
0x6e2eb1ed
0x6e2eb1ed
0x6e2eb1f0
0x6e2eb1f0
0x6e2eb162
0x6e2eb162
0x6e2eb162
0x6e2eb165
0x6e2eb165
0x6e2eb1c8
0x6e2eb1c8
0x6e2eb1c8
0x6e2eb1ca
0x6e2eb1cb
0x6e2eb1cc
0x6e2eb1cc
0x6e2eb1cd
0x6e2eb1cd
0x00000000
0x6e2eb167
0x6e2eb167
0x6e2eb168
0x6e2eb168
0x6e2eb170
0x6e2eb170
0x6e2eb170
0x6e2eb171
0x6e2eb171
0x6e2eb172
0x6e2eb173
0x6e2eb174
0x6e2eb175
0x6e2eb176
0x6e2eb178
0x6e2eb179
0x6e2eb17b
0x6e2eb17b
0x6e2eb17c
0x6e2eb17c
0x6e2eb17f
0x6e2eb17f
0x6e2eb181
0x6e2eb1ff
0x6e2eb1ff
0x6e2eb183
0x6e2eb183
0x6e2eb184
0x6e2eb185
0x6e2eb188
0x6e2eb1aa
0x6e2eb1aa
0x6e2eb1ac
0x6e2eb1ac
0x6e2eb1af
0x6e2eb1af
0x6e2eb1b2
0x6e2eb1b2
0x6e2eb18a
0x6e2eb18a
0x6e2eb18c
0x6e2eb18f
0x6e2eb190
0x6e2eb190
0x6e2eb192
0x6e2eb196
0x6e2eb1b8
0x6e2eb1b8
0x6e2eb1bf
0x6e2eb1bf
0x6e2eb1c1
0x6e2eb1c2
0x6e2eb1c2
0x00000000
0x6e2eb198
0x6e2eb198
0x6e2eb19b
0x6e2eb19b
0x6e2eb19c
0x6e2eb19e
0x6e2eb1a0
0x6e2eb1a0
0x6e2eb1a1
0x6e2eb1a1
0x6e2eb216
0x6e2eb219
0x00000000
0x6e2eb1a3
0x6e2eb1a3
0x6e2eb1a4
0x6e2eb21a
0x6e2eb21a
0x6e2eb221
0x6e2eb227
0x6e2eb227
0x6e2eb227
0x6e2eb22a
0x6e2eb22b
0x6e2eb1a6
0x6e2eb1a6
0x6e2eb1a6
0x00000000
0x6e2eb1a6
0x6e2eb1a4
0x6e2eb1a1
0x6e2eb196
0x6e2eb188
0x6e2eb181
0x6e2eb165
0x6e2eb12a
0x6e2eb12a
0x6e2eb12c
0x6e2eb12d
0x6e2eb12d
0x00000000
0x6e2eb12d
0x6e2eb128
0x6e2eb126
0x6e2eb111
0x6e2eb0f9
0x6e2eb0f9
0x6e2eb0f9
0x6e2eb0fb
0x6e2eb0fb
0x00000000
0x6e2eb0fb
0x6e2eb0f7
0x6e2eb0f0
0x6e2eb05b
0x6e2eb05b
0x6e2eb062
0x6e2eb062
0x00000000
0x6e2eb062
0x6e2eb059
0x6e2eb04f
0x6e2eb04d
0x6e2eb046
0x6e2eb044
0x6e2eb03d
0x6e2eb03a
0x6e2eb009
0x6e2eb009
0x6e2eb00c
0x6e2eb00d
0x6e2eb00f
0x6e2eb017
0x6e2eb019
0x6e2eb024
0x6e2eb026
0x6e2eb027
0x6e2eb02e
0x6e2eb030
0x6e2eb031
0x6e2eb031
0x00000000
0x6e2eb031
0x6e2eb007
0x6e2eb005
0x6e2eb003
0x6e2eb2b2
0x6e2eb2b2
0x6e2e4bcb
0x6e2e4bce
0x6e2e4bd1
0x6e2e4bd7
0x6e2e4bde
0x6e2e4be5
0x6e2e4bee
0x6e2e4bf6
0x6e2e4bfa
0x6e2e4bfd
0x6e2e4c03
0x6e2e4c06
0x6e2e4c08
0x00000000
0x6e2e4c0e
0x6e2e4c19
0x6e2e4c19
0x6e2e4c08
0x6e2e4bc5
0x6e2e4b22
0x6e2e4afc
0x6e2e4afc
0x6e2e4b05
0x6e2e4b05

APIs

TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6E2E5ADA,?,?,?,?,6E2E6ADD), ref: 6E2E4AED

Part of subcall function 6E2E4990: pthread_mutex_lock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E49A8
Part of subcall function 6E2E4990: pthread_tls_init.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E49B7
Part of subcall function 6E2E4990: pthread_mutex_unlock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E49C9

Strings

Error cleaning up spin_keys for thread , xrefs: 6E2E4A57, 6E2E4AD2

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Valuepthread_mutex_lockpthread_mutex_unlockpthread_tls_init
String ID: Error cleaning up spin_keys for thread
API String ID: 3593121786-2906507043
Opcode ID: 4c53f4b7bc48c272ad67dea5e5e20833427e3a4c65f6c626cc617daa8bdca642
Instruction ID: 627da4d9a3513c04d2125c4a7612809ae284310bc3267dd76dc779869518f85a
Opcode Fuzzy Hash: 4c53f4b7bc48c272ad67dea5e5e20833427e3a4c65f6c626cc617daa8bdca642
Instruction Fuzzy Hash: B43148B1904B258FE710AFB9E54831BBBF5BB45315F004A2DE89987741E774D508CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3920 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 90
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

calloc.MSVCRT ref: 6E2E3948
pthread_mutex_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6E2E3A87), ref: 6E2E3980
pthread_mutex_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6E2E3A87), ref: 6E2E3997
pthread_cond_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6E2E3A87), ref: 6E2E39AE

Part of subcall function 6E2E1DD0: calloc.MSVCRT ref: 6E2E1E02
Part of subcall function 6E2E1DD0: CreateSemaphoreA.KERNEL32 ref: 6E2E1E58
Part of subcall function 6E2E1DD0: CreateSemaphoreA.KERNEL32 ref: 6E2E1E7F
Part of subcall function 6E2E1DD0: RtlInitializeCriticalSection.NTDLL ref: 6E2E1E9E
Part of subcall function 6E2E1DD0: RtlInitializeCriticalSection.NTDLL ref: 6E2E1EA9
Part of subcall function 6E2E1DD0: RtlInitializeCriticalSection.NTDLL ref: 6E2E1EB4

??3@YAXPAX@Z.MSVCRT ref: 6E2E39D7
pthread_mutex_destroy.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6E2E3A87), ref: 6E2E39F7
??3@YAXPAX@Z.MSVCRT ref: 6E2E39FF
pthread_mutex_destroy.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6E2E3A87), ref: 6E2E3A37
pthread_mutex_destroy.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6E2E3A87), ref: 6E2E3A3F
??3@YAXPAX@Z.MSVCRT ref: 6E2E3A47

Strings

, xrefs: 6E2E3939

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ??3@CriticalInitializeSectionpthread_mutex_destroy$CreateSemaphorecallocpthread_mutex_init$pthread_cond_init
String ID:
API String ID: 3338094822-3916222277
Opcode ID: 3688def880ccab90dadea789450eb0615040d34b8df0cbcd7f165af587010fb6
Instruction ID: b53601b994dfe23d5ed37dea25c20aebbe6b859c7adfafbb04d903235af99c38
Opcode Fuzzy Hash: 3688def880ccab90dadea789450eb0615040d34b8df0cbcd7f165af587010fb6
Instruction Fuzzy Hash: 933161B56083198FD3019F66D48839FBBEAFF80319F41886ED4888B714D775C859CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E6260 Relevance: 18.2, APIs: 12, Instructions: 166
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 27%

			E6E2E6260(void* __eflags, signed int _a4, signed char* _a8, intOrPtr _a12, intOrPtr _a16) {
				signed int _v40;
				intOrPtr _v44;
				signed int _v48;
				signed int _v52;
				signed char _v56;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t52;
				void* _t56;
				signed int _t64;
				signed int _t66;
				signed char _t72;
				signed char _t82;
				signed int _t89;
				signed int _t92;
				signed int _t96;
				intOrPtr _t97;
				signed char _t98;
				signed int _t99;
				void* _t101;
				signed int* _t102;
				signed int* _t104;
				signed int* _t106;
				signed int* _t107;
				signed int* _t108;
				signed int* _t109;

				_t102 = _t101 - 0x2c;
				_t52 = E6E2E48D0(__eflags);
				if(_t52 == 0) {
					return 0xb;
				} else {
					_t96 = _t52;
					if(_a4 != 0) {
						 *_a4 =  *((intOrPtr*)(_t52 + 0xb4));
					}
					 *(_t96 + 0x68) = 0;
					_t89 = 0;
					 *(_t96 + 0x24) = 1;
					_t97 =  *0x6e2ef188;
					 *((intOrPtr*)(_t96 + 4)) = _a16;
					 *(_t96 + 0x14) = 0xffffffff;
					 *((intOrPtr*)(_t96 + 8)) = _a12;
					while(1) {
						_v48 = 0;
						_v52 = 0;
						_v56 = 1;
						 *_t102 = 0;
						_t56 = CreateEventA(??, ??, ??, ??);
						 *(_t96 + 0x18) = _t56;
						_t104 = _t102 - 0x10;
						if(_t56 != 0) {
							break;
						}
						if(_t89 == 0) {
							 *_t104 = 0;
							Sleep(??);
							_t102 = _t104 - 4;
							goto L7;
						} else {
							 *_t104 = 0x14;
							Sleep(??);
							_t104 = _t104 - 4;
							if(_t89 != 4) {
								L7:
								_t89 = _t89 + 1;
								continue;
							}
						}
						break;
					}
					 *(_t96 + 0x1c) = 0xffffffff;
					_t16 = _t96 + 0x38; // 0x38
					_t90 = _t16;
					E6E2E4A20(_t16, _t16, _t96, _t97);
					_t91 =  *(_t96 + 0x18);
					 *_t96 = 0xbab1f00d;
					 *(_t96 + 0x6c) = 0;
					 *(_t96 + 0x64) = 0;
					__eflags =  *(_t96 + 0x18);
					if( *(_t96 + 0x18) == 0) {
						L25:
						__eflags = _a4;
						if(_a4 != 0) {
							 *_a4 = 0;
						}
						E6E2E4650(_t96);
						return 0xb;
					} else {
						_t98 = 0;
						__eflags = _a8;
						if(_a8 != 0) {
							_t82 =  *_a8;
							_t98 = _a8[8];
							 *(_t96 + 0x24) = _t82;
							__eflags = _t82 & 0x00000008;
							if((_t82 & 0x00000008) != 0) {
								 *(_t96 + 0x6c) =  *(E6E2E4AD0(_t90, _t91, _t96, _t98) + 0x6c);
							} else {
								 *(_t96 + 0x6c) =  *(_a8 + 0xc);
							}
						}
						_v56 = _t98;
						_v40 = 0;
						_v44 = 4;
						_v48 = _t96;
						_v52 = E6E2E4F70;
						 *_t104 = 0;
						_t64 =  *0x6e2ef25c();
						_t99 = _t64;
						__eflags = _t64 - 1 - 0xfffffffd;
						if(_t64 - 1 > 0xfffffffd) {
							_t66 =  *(_t96 + 0x18);
							__eflags = _t66;
							if(_t66 != 0) {
								 *_t104 = _t66;
								CloseHandle(??);
								_t104 = _t104 - 4;
							}
							_t45 = _t96 + 0x1c; // 0x1c
							 *_t104 = _t45;
							E6E2E3470();
							E6E2E4A20(_t90, _t90, _t96, _t99);
							 *(_t96 + 0x18) = 0;
							 *(_t96 + 0x14) = 0;
							goto L25;
						} else {
							_t92 =  *(_t96 + 0x6c);
							_t72 = 0xfffffff1;
							__eflags = _t92 - 0xfffffff2;
							if(_t92 >= 0xfffffff2) {
								_t72 = 0xfffffffe;
								__eflags = _t92 - 0xffffffff;
								if(_t92 >= 0xffffffff) {
									_t72 = 0xf;
									__eflags = _t92 - 0xe;
									if(_t92 <= 0xe) {
										__eflags = _t92 - 2;
										_t72 =  <=  ? _t92 : 2;
									}
								}
							}
							_v56 = _t72;
							 *_t104 = _t99;
							SetThreadPriority(??, ??);
							_t106 = _t104 - 8;
							 *_t106 =  *(_t96 + 0x18);
							ResetEvent(??);
							_t107 = _t106 - 4;
							__eflags =  *(_t96 + 0x24) & 0x00000004;
							if(( *(_t96 + 0x24) & 0x00000004) != 0) {
								 *(_t96 + 0x14) = 0;
								 *_t107 = _t99;
								ResumeThread(??);
								_t108 = _t107 - 4;
								 *_t108 = _t99;
								CloseHandle(??);
								_t109 = _t108 - 4;
							} else {
								 *(_t96 + 0x14) = _t99;
								 *_t107 = _t99;
								ResumeThread(??);
								_t109 = _t107 - 4;
							}
							 *_t109 = 0;
							Sleep(??);
							__eflags = 0;
							return 0;
						}
					}
				}
			}

0x6e2e6264
0x6e2e6267
0x6e2e626e
0x6e2e64ec
0x6e2e6274
0x6e2e6278
0x6e2e627c
0x6e2e6288
0x6e2e6288
0x6e2e628e
0x6e2e6295
0x6e2e6297
0x6e2e629e
0x6e2e62a4
0x6e2e62ab
0x6e2e62b8
0x6e2e62bb
0x6e2e62bb
0x6e2e62c3
0x6e2e62cb
0x6e2e62d3
0x6e2e62da
0x6e2e62dc
0x6e2e62df
0x6e2e62e4
0x00000000
0x00000000
0x6e2e62e8
0x6e2e6300
0x6e2e6307
0x6e2e630d
0x00000000
0x6e2e62ea
0x6e2e62ea
0x6e2e62f1
0x6e2e62f3
0x6e2e62f9
0x6e2e62fb
0x6e2e62fb
0x00000000
0x6e2e62fb
0x6e2e62f9
0x00000000
0x6e2e62e8
0x6e2e6318
0x6e2e631f
0x6e2e631f
0x6e2e6324
0x6e2e6329
0x6e2e632c
0x6e2e6332
0x6e2e6339
0x6e2e6340
0x6e2e6342
0x6e2e649b
0x6e2e649f
0x6e2e64a1
0x6e2e64a7
0x6e2e64a7
0x6e2e64af
0x6e2e64c0
0x6e2e6348
0x6e2e634c
0x6e2e634e
0x6e2e6350
0x6e2e635a
0x6e2e635c
0x6e2e635f
0x6e2e6362
0x6e2e6364
0x6e2e64d0
0x6e2e636a
0x6e2e6371
0x6e2e6371
0x6e2e6364
0x6e2e6374
0x6e2e6378
0x6e2e6380
0x6e2e6388
0x6e2e638c
0x6e2e6394
0x6e2e639b
0x6e2e63a1
0x6e2e63a6
0x6e2e63a9
0x6e2e6468
0x6e2e646b
0x6e2e646d
0x6e2e646f
0x6e2e6472
0x6e2e6478
0x6e2e6478
0x6e2e647b
0x6e2e647e
0x6e2e6481
0x6e2e6488
0x6e2e648d
0x6e2e6494
0x00000000
0x6e2e63af
0x6e2e63af
0x6e2e63b2
0x6e2e63b7
0x6e2e63ba
0x6e2e6438
0x6e2e643d
0x6e2e6440
0x6e2e6446
0x6e2e644b
0x6e2e644e
0x6e2e6454
0x6e2e645c
0x6e2e645c
0x6e2e644e
0x6e2e6440
0x6e2e63bc
0x6e2e63c0
0x6e2e63c3
0x6e2e63cc
0x6e2e63cf
0x6e2e63d2
0x6e2e63d8
0x6e2e63db
0x6e2e63df
0x6e2e6410
0x6e2e6417
0x6e2e641a
0x6e2e6420
0x6e2e6423
0x6e2e6426
0x6e2e642c
0x6e2e63e1
0x6e2e63e1
0x6e2e63e4
0x6e2e63e7
0x6e2e63ed
0x6e2e63ed
0x6e2e63f0
0x6e2e63f7
0x6e2e63fd
0x6e2e6409
0x6e2e6409
0x6e2e63a9
0x6e2e6342

APIs

Part of subcall function 6E2E48D0: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4B15,?,?,?,?,?,?,?,?,?,?,?), ref: 6E2E48DC
Part of subcall function 6E2E48D0: pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E491C

CreateEventA.KERNEL32 ref: 6E2E62DA
Sleep.KERNEL32 ref: 6E2E62F1
Sleep.KERNEL32 ref: 6E2E6307

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Sleep$CreateEventpthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 2615191421-0
Opcode ID: 150acd05fae571a6453de35b5d1be61ef88f6af5a6289e4d7314c2a4f8b49d9b
Instruction ID: d616a5cb323ff234b4d7dbb82d286c320b2e69e3403cded15ec58278d1f9330b
Opcode Fuzzy Hash: 150acd05fae571a6453de35b5d1be61ef88f6af5a6289e4d7314c2a4f8b49d9b
Instruction Fuzzy Hash: 9861CFB5514B269FE700EFA8D18830ABBF1FF45324F404629EA658BB80D735E854CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E15B0 Relevance: 18.1, APIs: 12, Instructions: 94
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 6E2E1410: pthread_spin_lock.LIBWINPTHREAD-1(?,74E06490,?,6E2E15DF), ref: 6E2E1427
Part of subcall function 6E2E1410: pthread_spin_unlock.LIBWINPTHREAD-1(?,74E06490,?,6E2E15DF), ref: 6E2E144C

Sleep.KERNEL32 ref: 6E2E15CF
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E15FD
sem_destroy.LIBWINPTHREAD-1 ref: 6E2E1605

Part of subcall function 6E2E6CA0: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,?,?,?,?,6E2E160A), ref: 6E2E6CC3
Part of subcall function 6E2E6CA0: CloseHandle.KERNEL32(?,?,?,?,?,?,6E2E160A), ref: 6E2E6CD8
Part of subcall function 6E2E6CA0: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,6E2E160A), ref: 6E2E6CF5
Part of subcall function 6E2E6CA0: Sleep.KERNEL32(?,?,?,?,?,?,?,6E2E160A), ref: 6E2E6D07
Part of subcall function 6E2E6CA0: pthread_mutex_destroy.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6E2E160A), ref: 6E2E6D1F
Part of subcall function 6E2E6CA0: ??3@YAXPAX@Z.MSVCRT ref: 6E2E6D2C

sem_destroy.LIBWINPTHREAD-1 ref: 6E2E1618
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E1628
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E1630
??3@YAXPAX@Z.MSVCRT ref: 6E2E164A
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E1669
sem_init.LIBWINPTHREAD-1 ref: 6E2E16CF
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E16DD

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$??3@Sleeppthread_mutex_destroypthread_mutex_locksem_destroy$CloseHandlepthread_spin_lockpthread_spin_unlocksem_init
String ID:
API String ID: 2848882300-0
Opcode ID: 20c3a0b8650aa48284db67e6fd5b82713aa0bce67a79bfa03905167e71ea7d24
Instruction ID: 369ff1a6521cb4a8b3e97e1197a35d52fd594b2dfaaeb83e3f07ee98a1ca6fb3
Opcode Fuzzy Hash: 20c3a0b8650aa48284db67e6fd5b82713aa0bce67a79bfa03905167e71ea7d24
Instruction Fuzzy Hash: 853117B45087198FC710AFA9D08465EBBE5FF84358F404D2EE8D987B50E730E4898B82

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E1FA0 Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 184
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 25%

			E6E2E1FA0(void* __ecx, char _a4, signed int _a8, signed int _a12) {
				intOrPtr _v32;
				char _v36;
				signed int _v48;
				signed int _v52;
				signed int _v56;
				void* __edi;
				void* __ebp;
				signed int _t34;
				signed int _t35;
				intOrPtr _t37;
				signed int _t38;
				signed int _t39;
				signed int _t42;
				signed int _t45;
				signed int _t46;
				signed int _t47;
				signed int _t48;
				signed int _t50;
				signed int _t51;
				signed int _t53;
				signed int _t55;
				signed int _t56;
				signed int _t57;
				signed int _t62;
				void* _t63;
				void* _t64;
				signed int _t66;
				char _t67;
				signed int _t68;
				signed int _t70;
				void* _t71;
				intOrPtr* _t72;
				void* _t78;

				_t63 = __ecx;
				_t72 = _t71 - 0x2c;
				_t76 = _a8 - 1;
				_t67 = _a4;
				_t62 = _a12;
				if(_a8 == 1) {
					_v56 = _t62;
					 *_t72 = _t67;
					_t34 = E6E2E2DC0();
					__eflags = _t34 - 0x80;
					if(_t34 == 0x80) {
						L11:
						 *_t72 = _t67;
						_v56 = 0;
						_t35 = WaitForSingleObject(??, ??);
						_t72 = _t72 - 8;
						_t68 = _a8;
						__eflags = _t35;
						if(_t35 == 0) {
							goto L13;
						}
					} else {
						__eflags = _t34 - 0x102;
						if(_t34 != 0x102) {
							_t68 = 0x16;
							__eflags = _t34;
							if(_t34 == 0) {
								goto L13;
							}
						} else {
							_a8 = 0x8a;
							goto L11;
						}
					}
					goto L14;
				} else {
					_v36 = _t67;
					_t37 = E6E2E5830(_t76);
					_v32 = _t37;
					if(_t37 == 0) {
						_t70 = 0x14;
						__eflags = _t62 - 0xffffffff;
						if(_t62 == 0xffffffff) {
							while(1) {
								_v56 = 0x28;
								 *_t72 = _t67;
								_t38 = E6E2E2DC0();
								__eflags = _t38 - 0x80;
								if(_t38 == 0x80) {
									break;
								}
								__eflags = _t38 - 0x102;
								if(_t38 == 0x102) {
									_t45 = E6E2E59A0();
									__eflags = _t45;
									if(_t45 != 0) {
										goto L49;
									} else {
										continue;
									}
								} else {
									__eflags = _t38;
									if(_t38 == 0) {
										goto L13;
									} else {
										_t46 = E6E2E59A0();
										__eflags = _t46;
										if(_t46 != 0) {
											L49:
											__eflags = _a8 - 2;
											if(__eflags == 0) {
												goto L33;
											} else {
												goto L50;
											}
										} else {
											goto L33;
										}
									}
								}
								goto L53;
							}
							_t39 = E6E2E59A0();
							__eflags = _t39;
							if(_t39 != 0) {
								goto L49;
							} else {
								 *_t72 = _t67;
								_v56 = 0;
								_t42 = WaitForSingleObject(??, ??);
								_t72 = _t72 - 8;
								__eflags = _t42;
								_t68 = (_t42 & 0xffffff00 | _t42 != 0x00000000) & 0x000000ff;
								goto L14;
							}
						} else {
							while(1) {
								__eflags = _t62 - _t70;
								 *_t72 = _t67;
								_t66 =  <=  ? _t62 : _t70;
								_v56 = _t66;
								_t47 = E6E2E2DC0();
								__eflags = _t47 - 0x80;
								if(_t47 == 0x80) {
									break;
								}
								__eflags = _t47 - 0x102;
								if(_t47 == 0x102) {
									_t62 = _t62 - _t66;
									__eflags = _t62;
									if(_t62 != 0) {
										_t50 = E6E2E59A0();
										__eflags = _t50;
										if(_t50 != 0) {
											goto L33;
										} else {
											_t70 = _t66;
											continue;
										}
									} else {
										_v56 = 0;
										 *_t72 = _t67;
										_t51 = WaitForSingleObject(??, ??);
										_t72 = _t72 - 8;
										__eflags = _t51;
										if(_t51 == 0) {
											goto L13;
										} else {
											_t48 = 1;
											_t68 = 0x8a;
											goto L36;
										}
										goto L14;
									}
								} else {
									_t68 = 0x16;
									__eflags = _t47;
									if(_t47 == 0) {
										_t68 = 0;
										__eflags = 0;
										goto L35;
									} else {
										L25:
										_t48 = 1;
										__eflags = _t62 - _t70;
										if(_t62 <= _t70) {
											L36:
											__eflags = _a8 - 2;
											if(_a8 != 2) {
												__eflags = _t48;
												if(__eflags != 0) {
													E6E2E5AD0(_t63, _t66, _t70, __eflags);
												}
											}
											goto L14;
										} else {
											_t47 = E6E2E59A0();
											__eflags = _t47;
											if(_t47 != 0) {
												goto L33;
											} else {
												L35:
												__eflags = _t68;
												_t24 = _t68 != 0;
												__eflags = _t24;
												_t48 = _t47 & 0xffffff00 | _t24;
												goto L36;
											}
										}
									}
								}
								goto L53;
							}
							_t68 = 1;
							goto L25;
						}
					} else {
						while(1) {
							_v48 = _t62;
							_v52 = 0;
							_v56 =  &_v36;
							 *_t72 = 2;
							_t53 = E6E2E2E60();
							_t78 = _t53 - 0x80;
							if(_t78 == 0) {
								break;
							}
							if(_t78 > 0) {
								_t68 = 0x8a;
								__eflags = _t53 - 0x102;
								if(_t53 != 0x102) {
									goto L47;
								} else {
									L16:
									_v56 = 0;
									 *_t72 = _v36;
									_t55 = WaitForSingleObject(??, ??);
									_t72 = _t72 - 8;
									__eflags = _t55;
									if(_t55 == 0) {
										goto L13;
									} else {
										__eflags = _a8 - 2;
										_t20 = _a8 != 2;
										__eflags = _t20;
										_t56 = _t55 & 0xffffff00 | _t20;
										goto L18;
									}
								}
							} else {
								if(_t53 == 0) {
									L13:
									_t68 = 0;
									__eflags = 0;
									goto L14;
								} else {
									if(_t53 != 1) {
										L47:
										__eflags = _a8 - 2;
										_t68 = 0x16;
										_t56 = _t53 & 0xffffff00 | _a8 != 0x00000002;
										L18:
										__eflags = _t56;
										if(_t56 == 0) {
											goto L14;
										} else {
											_t57 = E6E2E59A0();
											__eflags = _t57;
											if(_t57 != 0) {
												L33:
												return 0x16;
											} else {
												return _t68;
											}
										}
									} else {
										 *_t72 = _v32;
										ResetEvent(??);
										_t72 = _t72 - 4;
										_t81 = _a8 - 2;
										if(_a8 != 2) {
											L50:
											E6E2E5AD0(_t63, _t64, _t70, __eflags);
											_t68 = 0x16;
											L14:
											return _t68;
										} else {
											E6E2E5AD0(_t63, _t64, _t70, _t81);
											continue;
										}
									}
								}
							}
							goto L53;
						}
						_t68 = 1;
						goto L16;
					}
				}
				L53:
			}

0x6e2e1fa0
0x6e2e1fa4
0x6e2e1fa7
0x6e2e1fac
0x6e2e1fb0
0x6e2e1fb4
0x6e2e2030
0x6e2e2034
0x6e2e2037
0x6e2e203c
0x6e2e2041
0x6e2e2056
0x6e2e2056
0x6e2e2059
0x6e2e2061
0x6e2e2067
0x6e2e206a
0x6e2e206e
0x6e2e2070
0x00000000
0x00000000
0x6e2e2043
0x6e2e2043
0x6e2e2048
0x6e2e2220
0x6e2e2225
0x6e2e2227
0x00000000
0x6e2e222d
0x6e2e204e
0x6e2e204e
0x00000000
0x6e2e204e
0x6e2e2048
0x00000000
0x6e2e1fb6
0x6e2e1fb6
0x6e2e1fba
0x6e2e1fbf
0x6e2e1fc5
0x6e2e20e0
0x6e2e20e5
0x6e2e20e8
0x6e2e213d
0x6e2e213d
0x6e2e2145
0x6e2e2148
0x6e2e214d
0x6e2e2152
0x00000000
0x00000000
0x6e2e2158
0x6e2e215d
0x6e2e2130
0x6e2e2135
0x6e2e2137
0x00000000
0x00000000
0x00000000
0x00000000
0x6e2e215f
0x6e2e215f
0x6e2e2161
0x00000000
0x6e2e2167
0x6e2e2167
0x6e2e216c
0x6e2e216e
0x6e2e2260
0x6e2e2260
0x6e2e2265
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x6e2e216e
0x6e2e2161
0x00000000
0x6e2e215d
0x6e2e21f0
0x6e2e21f5
0x6e2e21f7
0x00000000
0x6e2e21f9
0x6e2e21f9
0x6e2e21fc
0x6e2e2204
0x6e2e220a
0x6e2e220d
0x6e2e2215
0x00000000
0x6e2e2215
0x6e2e20ea
0x6e2e20ea
0x6e2e20ea
0x6e2e20ee
0x6e2e20f1
0x6e2e20f4
0x6e2e20f8
0x6e2e20fd
0x6e2e2102
0x00000000
0x00000000
0x6e2e2108
0x6e2e210d
0x6e2e21b0
0x6e2e21b0
0x6e2e21b2
0x6e2e227a
0x6e2e227f
0x6e2e2281
0x00000000
0x6e2e2287
0x6e2e2287
0x00000000
0x6e2e2287
0x6e2e21b8
0x6e2e21b8
0x6e2e21c0
0x6e2e21c3
0x6e2e21c9
0x6e2e21cc
0x6e2e21ce
0x00000000
0x6e2e21d4
0x6e2e21d4
0x6e2e21d9
0x00000000
0x6e2e21d9
0x00000000
0x6e2e21ce
0x6e2e2113
0x6e2e2113
0x6e2e2118
0x6e2e211a
0x6e2e2188
0x6e2e2188
0x00000000
0x6e2e211c
0x6e2e211c
0x6e2e211c
0x6e2e2121
0x6e2e2123
0x6e2e2190
0x6e2e2190
0x6e2e2195
0x6e2e219b
0x6e2e219d
0x6e2e21a3
0x6e2e21a3
0x6e2e219d
0x00000000
0x6e2e2125
0x6e2e2125
0x6e2e212a
0x6e2e212c
0x00000000
0x6e2e212e
0x6e2e218a
0x6e2e218a
0x6e2e218c
0x6e2e218c
0x6e2e218c
0x00000000
0x6e2e218c
0x6e2e212c
0x6e2e2123
0x6e2e211a
0x00000000
0x6e2e210d
0x6e2e21e0
0x00000000
0x6e2e21e0
0x6e2e1fcb
0x6e2e1fcb
0x6e2e1fcf
0x6e2e1fd3
0x6e2e1fdb
0x6e2e1fdf
0x6e2e1fe6
0x6e2e1feb
0x6e2e1ff0
0x00000000
0x00000000
0x6e2e1ff6
0x6e2e2088
0x6e2e208d
0x6e2e2092
0x00000000
0x6e2e2098
0x6e2e2098
0x6e2e209c
0x6e2e20a4
0x6e2e20a7
0x6e2e20ad
0x6e2e20b0
0x6e2e20b2
0x00000000
0x6e2e20b4
0x6e2e20b4
0x6e2e20b9
0x6e2e20b9
0x6e2e20b9
0x00000000
0x6e2e20b9
0x6e2e20b2
0x6e2e1ffc
0x6e2e1ffe
0x6e2e2078
0x6e2e2078
0x6e2e2078
0x00000000
0x6e2e2000
0x6e2e2003
0x6e2e2238
0x6e2e2238
0x6e2e223d
0x6e2e2242
0x6e2e20bc
0x6e2e20bc
0x6e2e20be
0x00000000
0x6e2e20c0
0x6e2e20c0
0x6e2e20c5
0x6e2e20c7
0x6e2e2174
0x6e2e2182
0x6e2e20cd
0x6e2e20d6
0x6e2e20d6
0x6e2e20c7
0x6e2e2009
0x6e2e200d
0x6e2e2010
0x6e2e2016
0x6e2e2019
0x6e2e201e
0x6e2e226b
0x6e2e226b
0x6e2e2270
0x6e2e207a
0x6e2e2083
0x6e2e2024
0x6e2e2024
0x00000000
0x6e2e2024
0x6e2e201e
0x6e2e2003
0x6e2e1ffe
0x00000000
0x6e2e1ff6
0x6e2e2250
0x00000000
0x6e2e2250
0x6e2e1fc5
0x00000000

APIs

pthread_getevent.LIBWINPTHREAD-1 ref: 6E2E1FBA
ResetEvent.KERNEL32 ref: 6E2E2010
pthread_testcancel.LIBWINPTHREAD-1 ref: 6E2E2024
WaitForSingleObject.KERNEL32 ref: 6E2E2061
pthread_testcancel.LIBWINPTHREAD-1 ref: 6E2E21A3

Part of subcall function 6E2E2E60: WaitForMultipleObjects.KERNEL32 ref: 6E2E2ECC

WaitForSingleObject.KERNEL32 ref: 6E2E20A7
pthread_testcancel.LIBWINPTHREAD-1 ref: 6E2E226B

Strings

(, xrefs: 6E2E213D

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Waitpthread_testcancel$ObjectSingle$EventMultipleObjectsResetpthread_getevent
String ID: (
API String ID: 2434277775-3887548279
Opcode ID: 001154cc0f8650f2cff62621dbea4c975a2f649a35f1e9588199b631eeb80466
Instruction ID: 03bf1ff85377ca575bb5b96b62cf7f6839c38dbf8898820f37e389a5ab7599ba
Opcode Fuzzy Hash: 001154cc0f8650f2cff62621dbea4c975a2f649a35f1e9588199b631eeb80466
Instruction Fuzzy Hash: E351F2B351833F8BE710ABE5D54436E76E7AB81356FC0082DE9868BA80D7B5C944C793

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E16F0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 94
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

calloc.MSVCRT ref: 6E2E1722
pthread_mutex_init.LIBWINPTHREAD-1 ref: 6E2E176A
sem_init.LIBWINPTHREAD-1 ref: 6E2E178C
sem_init.LIBWINPTHREAD-1 ref: 6E2E17AA

Strings

$, xrefs: 6E2E1713

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: sem_init$callocpthread_mutex_init
String ID: $
API String ID: 2903874097-3993045852
Opcode ID: 8ccfbfe84c1fc9c689a4110a86c9ae69be8d04506221a01687fb4f4cbab6dfc5
Instruction ID: efd9dbcb6d52824be0d7e3caad81b4d8f9f67e11a44cb466701af45a3eea01a5
Opcode Fuzzy Hash: 8ccfbfe84c1fc9c689a4110a86c9ae69be8d04506221a01687fb4f4cbab6dfc5
Instruction Fuzzy Hash: D83181B96043298BD7009FA9D48075FB7EAFF84759F85487DE8888B705D734C854CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E1DD0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 94
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

calloc.MSVCRT ref: 6E2E1E02
CreateSemaphoreA.KERNEL32 ref: 6E2E1E58
CreateSemaphoreA.KERNEL32 ref: 6E2E1E7F
RtlInitializeCriticalSection.NTDLL ref: 6E2E1E9E
RtlInitializeCriticalSection.NTDLL ref: 6E2E1EA9
RtlInitializeCriticalSection.NTDLL ref: 6E2E1EB4

Strings

l, xrefs: 6E2E1DF3

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CriticalInitializeSection$CreateSemaphore$calloc
String ID: l
API String ID: 2075313795-2517025534
Opcode ID: f9cca53f4ed3d52094b811100f279fb5abb3b3a7eca22671eef6dee895d8e3a7
Instruction ID: 1344c9c8706159628e8bf40dcace3c5c4d74f0509acf47b727280f4d53bc7ba8
Opcode Fuzzy Hash: f9cca53f4ed3d52094b811100f279fb5abb3b3a7eca22671eef6dee895d8e3a7
Instruction Fuzzy Hash: CF317AB15043158FEB00BF79D58835ABBE1EF41314F558AADE8948B389E779C488CF92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E2340 Relevance: 16.6, APIs: 11, Instructions: 127
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlTryEnterCriticalSection.NTDLL ref: 6E2E23AA
CloseHandle.KERNEL32 ref: 6E2E23EB
CloseHandle.KERNEL32 ref: 6E2E23F6
RtlLeaveCriticalSection.NTDLL ref: 6E2E2402
RtlDeleteCriticalSection.NTDLL ref: 6E2E2414
RtlDeleteCriticalSection.NTDLL ref: 6E2E241C
RtlDeleteCriticalSection.NTDLL ref: 6E2E2427
??3@YAXPAX@Z.MSVCRT ref: 6E2E242F
pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E247C
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E2499

Part of subcall function 6E2E2290: RtlEnterCriticalSection.NTDLL ref: 6E2E22B0
Part of subcall function 6E2E2290: RtlLeaveCriticalSection.NTDLL ref: 6E2E22CC

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CriticalSection$Delete$CloseEnterHandleLeave$??3@pthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 1387492096-0
Opcode ID: e89066800d8d90c4a7f889cfc5f682b9bfdbc3ec448024f6fc138acc43cbde93
Instruction ID: 5d557e81b33329976613cea510acd684b34426ef53276f04530836d55de00f9a
Opcode Fuzzy Hash: e89066800d8d90c4a7f889cfc5f682b9bfdbc3ec448024f6fc138acc43cbde93
Instruction Fuzzy Hash: 0B41D2B660431A8FDB00AFBDE48025AB7E6FF80314F41097DD9898B780EB31D845CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E6600 Relevance: 16.6, APIs: 11, Instructions: 101
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 29%

			E6E2E6600(void* __ecx, void* __ebp, void* __eflags, intOrPtr _a4, void* _a8) {
				char _v16;
				char* _v40;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* _t21;
				intOrPtr _t24;
				int _t25;
				void* _t28;
				void* _t30;
				intOrPtr _t31;
				intOrPtr _t33;
				long _t44;
				void* _t46;
				void* _t47;
				intOrPtr _t52;
				signed int _t54;
				intOrPtr _t55;
				void* _t57;
				intOrPtr* _t58;

				_t47 = __ecx;
				_t58 = _t57 - 0x20;
				 *_t58 = 0x6e2ea018;
				_t52 = _a4;
				E6E2E2F90();
				_t21 = E6E2E4460(_t52);
				if(_t21 == 0) {
					L16:
					 *_t58 = 0x6e2ea018;
					E6E2E32E0();
					return 3;
				} else {
					_t46 = _t21;
					_t24 =  *((intOrPtr*)(_t21 + 0x14));
					if(_t24 == 0) {
						goto L16;
					} else {
						 *_t58 = _t24;
						_v40 =  &_v16;
						_t25 = GetHandleInformation(??, ??);
						_t58 = _t58 - 8;
						if(_t25 == 0) {
							goto L16;
						} else {
							_t54 =  *(_t46 + 0x24) & 0x00000004;
							if(_t54 != 0) {
								 *_t58 = 0x6e2ea018;
								E6E2E32E0();
								return 0x16;
							} else {
								_t28 = E6E2E4AD0(_t46, _t47, _t52, _t54);
								if(_t28 != 0) {
									_t54 =  *(_t28 + 0xb4);
								}
								if(_t52 == _t54) {
									 *_t58 = 0x6e2ea018;
									E6E2E32E0();
									_t30 = 0x24;
								} else {
									_t31 =  *((intOrPtr*)(_t46 + 0x14));
									if( *((intOrPtr*)(_t46 + 0x68)) != 0) {
										L10:
										 *_t58 = _t31;
										_t55 =  *0x6e2ef184;
										CloseHandle(??);
										_t33 =  *((intOrPtr*)(_t46 + 0x18));
										_t58 = _t58 - 4;
										if(_t33 != 0) {
											 *_t58 = _t33;
											CloseHandle(??);
											_t58 = _t58 - 4;
										}
										 *((intOrPtr*)(_t46 + 0x18)) = 0;
										if( *((intOrPtr*)(_t58 + 0x34)) != 0) {
											 *((intOrPtr*)( *((intOrPtr*)(_t58 + 0x34)))) =  *((intOrPtr*)(_t46 + 4));
										}
										_t16 = _t46 + 0x1c; // 0x1c
										 *_t58 = _t16;
										E6E2E3470();
										_t17 = _t46 + 0x38; // 0x38
										E6E2E4A20(_t17, _t46, _t52, _t55);
										E6E2E4650(_t46);
										 *_t58 = 0x6e2ea018;
										E6E2E32E0();
										_t30 = 0;
									} else {
										 *((intOrPtr*)(_t58 + 4)) = 0;
										 *_t58 = _t31;
										_t44 = WaitForSingleObject(??, ??);
										_t58 = _t58 - 8;
										if(_t44 != 0) {
											if( *((intOrPtr*)(_t46 + 0x68)) != 0) {
												goto L9;
											} else {
												 *_t58 = 0x6e2ea018;
												E6E2E32E0();
												_t30 = 0x10;
											}
										} else {
											L9:
											_t31 =  *((intOrPtr*)(_t46 + 0x14));
											goto L10;
										}
									}
								}
								return _t30;
							}
						}
					}
				}
			}

0x6e2e6600
0x6e2e6603
0x6e2e6606
0x6e2e660d
0x6e2e6611
0x6e2e6618
0x6e2e661f
0x6e2e6700
0x6e2e6700
0x6e2e6707
0x6e2e6717
0x6e2e6625
0x6e2e6625
0x6e2e6627
0x6e2e662c
0x00000000
0x6e2e6632
0x6e2e6636
0x6e2e6639
0x6e2e663d
0x6e2e6643
0x6e2e6648
0x00000000
0x6e2e664e
0x6e2e6651
0x6e2e6654
0x6e2e6720
0x6e2e6727
0x6e2e6737
0x6e2e665a
0x6e2e665a
0x6e2e6661
0x6e2e6663
0x6e2e6663
0x6e2e666b
0x6e2e6760
0x6e2e6767
0x6e2e676c
0x6e2e6671
0x6e2e6674
0x6e2e6679
0x6e2e669a
0x6e2e669a
0x6e2e669d
0x6e2e66a3
0x6e2e66a5
0x6e2e66a8
0x6e2e66ad
0x6e2e66af
0x6e2e66b2
0x6e2e66b4
0x6e2e66b4
0x6e2e66bb
0x6e2e66c4
0x6e2e66cd
0x6e2e66cd
0x6e2e66cf
0x6e2e66d2
0x6e2e66d5
0x6e2e66da
0x6e2e66dd
0x6e2e66e4
0x6e2e66e9
0x6e2e66f0
0x6e2e66f5
0x6e2e667b
0x6e2e667b
0x6e2e6683
0x6e2e6686
0x6e2e668c
0x6e2e6691
0x6e2e6745
0x00000000
0x6e2e674b
0x6e2e674b
0x6e2e6752
0x6e2e6757
0x6e2e6757
0x6e2e6697
0x6e2e6697
0x6e2e6697
0x00000000
0x6e2e6697
0x6e2e6691
0x6e2e6679
0x6e2e66fd
0x6e2e66fd
0x6e2e6654
0x6e2e6648
0x6e2e662c

APIs

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E6611
GetHandleInformation.KERNEL32 ref: 6E2E663D
WaitForSingleObject.KERNEL32 ref: 6E2E6686
CloseHandle.KERNEL32 ref: 6E2E66A3
CloseHandle.KERNEL32 ref: 6E2E66B2
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E66D5
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E66F0
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E6707
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E6727

Part of subcall function 6E2E4AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6E2E5ADA,?,?,?,?,6E2E6ADD), ref: 6E2E4AED

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Handlepthread_mutex_unlock$Close$InformationObjectSingleValueWaitpthread_mutex_destroypthread_mutex_lock
String ID:
API String ID: 3125639524-0
Opcode ID: 5420d799d745a9c5cdd6c13720ef2ae0b040a05ad2171203b3691d06c1cb43bb
Instruction ID: a83ebf6c89c865a6db2f3823cc786cc39586ff0b166431c8361f546eaf46484a
Opcode Fuzzy Hash: 5420d799d745a9c5cdd6c13720ef2ae0b040a05ad2171203b3691d06c1cb43bb
Instruction Fuzzy Hash: 8B31A3B56242298BDB40AFE9E5C57AA7BE7EF40315F800868D9808FA04D734D844C7E3

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5130 Relevance: 15.8, APIs: 7, Strings: 2, Instructions: 49threadCOMMON

Download Yara Rule

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6E2E5152

Part of subcall function 6E2E4C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C36
Part of subcall function 6E2E4C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C4B

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6E2E5161
GetCurrentThreadId.KERNEL32 ref: 6E2E5168
__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6E2E5177
printf.MSVCRT ref: 6E2E519B
GetCurrentThreadId.KERNEL32 ref: 6E2E51B0
printf.MSVCRT ref: 6E2E51D1

Strings

T%p %d %s, xrefs: 6E2E51CA
T%p %d V=%0X H=%p %s, xrefs: 6E2E5194

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: __pth_gpointer_locked$CurrentThreadprintf$pthread_mutex_lockpthread_mutex_unlock
String ID: T%p %d %s$T%p %d V=%0X H=%p %s
API String ID: 2614883391-2059990036
Opcode ID: 0d902b188f631c3cc4755d25be1f4ee70d284fe49d5b8ff13418b9f17a62833f
Instruction ID: 5d3d509fcd1a34606b3861abc5566f0c45b4bff85e96b45016f43530b32d82f0
Opcode Fuzzy Hash: 0d902b188f631c3cc4755d25be1f4ee70d284fe49d5b8ff13418b9f17a62833f
Instruction Fuzzy Hash: F211D6B5909715AFD750AFA9E48595FBBE6FF89610F809C1EF88887700D770D840CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E6CA0 Relevance: 15.1, APIs: 10, Instructions: 58sleepCOMMON

Download Yara Rule

APIs

pthread_mutex_lock.LIBWINPTHREAD-1(?,?,?,?,?,?,6E2E160A), ref: 6E2E6CC3
CloseHandle.KERNEL32(?,?,?,?,?,?,6E2E160A), ref: 6E2E6CD8
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,6E2E160A), ref: 6E2E6CF5
Sleep.KERNEL32(?,?,?,?,?,?,?,6E2E160A), ref: 6E2E6D07
Sleep.KERNEL32(?,?,?,?,?,?,?,?,6E2E160A), ref: 6E2E6D17
pthread_mutex_destroy.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6E2E160A), ref: 6E2E6D1F

Part of subcall function 6E2E3470: CloseHandle.KERNEL32(?,?,?,74E06490,6E2E6D24,?,?,?,?,?,?,?,?,6E2E160A), ref: 6E2E348D
Part of subcall function 6E2E3470: ??3@YAXPAX@Z.MSVCRT ref: 6E2E3499

??3@YAXPAX@Z.MSVCRT ref: 6E2E6D2C
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,6E2E160A), ref: 6E2E6D3E
_errno.MSVCRT ref: 6E2E6D43
_errno.MSVCRT ref: 6E2E6D56

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ??3@CloseHandleSleep_errnopthread_mutex_unlock$pthread_mutex_destroypthread_mutex_lock
String ID:
API String ID: 1604885533-0
Opcode ID: abd24b00a8fb5fe29f6600e70c234c30df0f4d532090383954bfa4c97c8716b6
Instruction ID: cdc3a9c7a2ec7b4f43dd3b8da7d4fe2ca444ce82a645b94b43716726bee95ad1
Opcode Fuzzy Hash: abd24b00a8fb5fe29f6600e70c234c30df0f4d532090383954bfa4c97c8716b6
Instruction Fuzzy Hash: 94119BB541472A8BD7007FB9DD8821A7BF5EF02315F914A2CD5E44B691DB359800CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E37D0 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 38COMMON

Download Yara Rule

APIs

pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6E2E3FEE), ref: 6E2E37E0
pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6E2E3FEE), ref: 6E2E3805
fprintf.MSVCRT ref: 6E2E3842
exit.MSVCRT ref: 6E2E384E

Strings

Assertion failed: (%s), file %s, line %d, xrefs: 6E2E3837
(, xrefs: 6E2E381F
/var/tmp/build/mingw-w64-0a1d495478d8/mingw-w64-libraries/winpthreads/src/rwlock.c, xrefs: 6E2E3827
(((rwlock_t *)*rwl)->valid == LIFE_RWLOCK) && (((rwlock_t *)*rwl)->busy > 0), xrefs: 6E2E382F

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: exitfprintfpthread_spin_lockpthread_spin_unlock
String ID: ($(((rwlock_t *)*rwl)->valid == LIFE_RWLOCK) && (((rwlock_t *)*rwl)->busy > 0)$/var/tmp/build/mingw-w64-0a1d495478d8/mingw-w64-libraries/winpthreads/src/rwlock.c$Assertion failed: (%s), file %s, line %d
API String ID: 2153800997-3539959846
Opcode ID: d732b2c7bc35e9e927b98a8c53cc80cfbfa2ced2c8270e4ed9434664a442ce5e
Instruction ID: 7545f801e2ba6960162cc6c72a28d12105965b33872f7a3e923b554a0f9f2700
Opcode Fuzzy Hash: d732b2c7bc35e9e927b98a8c53cc80cfbfa2ced2c8270e4ed9434664a442ce5e
Instruction Fuzzy Hash: AD015EB45083298FCB10DFA4D489399BBF6FF41304F81885CE5888B704C774A844DBA3

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E1517 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 37COMMON

Download Yara Rule

APIs

pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E1530
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E1555
fprintf.MSVCRT ref: 6E2E1592
exit.MSVCRT ref: 6E2E159E

Strings

/var/tmp/build/mingw-w64-0a1d495478d8/mingw-w64-libraries/winpthreads/src/barrier.c, xrefs: 6E2E1577
(((barrier_t *)*barrier)->valid == LIFE_BARRIER) && (((barrier_t *)*barrier)->busy > 0), xrefs: 6E2E157F
Assertion failed: (%s), file %s, line %d, xrefs: 6E2E1587
&, xrefs: 6E2E156F

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: exitfprintfpthread_spin_lockpthread_spin_unlock
String ID: &$(((barrier_t *)*barrier)->valid == LIFE_BARRIER) && (((barrier_t *)*barrier)->busy > 0)$/var/tmp/build/mingw-w64-0a1d495478d8/mingw-w64-libraries/winpthreads/src/barrier.c$Assertion failed: (%s), file %s, line %d
API String ID: 2153800997-276176044
Opcode ID: d1f72c66c6ae3e3cc842aace3a31c99c8cdefdba72124f4ec6141a75a37365d6
Instruction ID: af5743824f368513cd7451e8a7d464d55a843f9129528247ff255d3a9ed57735
Opcode Fuzzy Hash: d1f72c66c6ae3e3cc842aace3a31c99c8cdefdba72124f4ec6141a75a37365d6
Instruction Fuzzy Hash: A3011AB1504329CFCB20DFA4D48579ABBF6BF41314F818C58E6995BA04C7B5A885CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E56C0 Relevance: 13.6, APIs: 9, Instructions: 78COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6E2E56CB

Part of subcall function 6E2E4AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6E2E5ADA,?,?,?,?,6E2E6ADD), ref: 6E2E4AED

pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E56E2
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E5700
SetLastError.KERNEL32 ref: 6E2E570C
realloc.MSVCRT ref: 6E2E5734
realloc.MSVCRT ref: 6E2E574B
memset.MSVCRT ref: 6E2E577C
memset.MSVCRT ref: 6E2E579B

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ErrorLastmemsetrealloc$Valuepthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 3506545171-0
Opcode ID: 872549fda3d312d1b9c55f266b91f40f140889da74e52a9a03118c7d96e80df6
Instruction ID: 0938c357f2e5cebfe29c40dce40ebb505cf1279736508b07c798fd8438e9fd72
Opcode Fuzzy Hash: 872549fda3d312d1b9c55f266b91f40f140889da74e52a9a03118c7d96e80df6
Instruction Fuzzy Hash: DC3114B850831ACFCB40DF69D08465EBBE5FF88744F51896DE8898B705E730E885CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E6780 Relevance: 13.6, APIs: 9, Instructions: 69
COMMON

Download Yara Rule

C-Code - Quality: 16%

			E6E2E6780(void* __ecx, void* __edi, void* __ebp, void* __eflags, intOrPtr _a4) {
				char _v16;
				char* _v40;
				void* __ebx;
				void* __esi;
				void* _t17;
				intOrPtr _t21;
				int _t22;
				signed int _t23;
				void* _t25;
				intOrPtr _t30;
				void* _t38;
				intOrPtr _t41;
				void* _t42;
				intOrPtr _t43;
				void* _t45;
				intOrPtr* _t46;

				_t42 = __edi;
				_t46 = _t45 - 0x24;
				 *_t46 = _a4;
				_t17 = E6E2E4C20();
				 *_t46 = 0x6e2ea018;
				_t38 = _t17;
				E6E2E2F90();
				if(_t38 == 0) {
					L11:
					 *_t46 = 0x6e2ea018;
					E6E2E32E0();
					return 3;
				} else {
					_t21 =  *((intOrPtr*)(_t38 + 0x14));
					if(_t21 == 0) {
						goto L11;
					} else {
						 *_t46 = _t21;
						_v40 =  &_v16;
						_t22 = GetHandleInformation(??, ??);
						_t46 = _t46 - 8;
						if(_t22 == 0) {
							goto L11;
						} else {
							_t23 =  *(_t38 + 0x24);
							if((_t23 & 0x00000004) != 0) {
								 *_t46 = 0x6e2ea018;
								E6E2E32E0();
								_t25 = 0x16;
							} else {
								_t41 =  *((intOrPtr*)(_t38 + 0x14));
								 *((intOrPtr*)(_t38 + 0x14)) = 0;
								 *(_t38 + 0x24) = _t23 | 0x00000004;
								if(_t41 != 0) {
									 *_t46 = _t41;
									_t43 =  *0x6e2ef184;
									CloseHandle(??);
									_t46 = _t46 - 4;
									if( *((intOrPtr*)(_t38 + 0x68)) != 0) {
										_t30 =  *((intOrPtr*)(_t38 + 0x18));
										if(_t30 != 0) {
											 *_t46 = _t30;
											CloseHandle(??);
											_t46 = _t46 - 4;
										}
										_t13 = _t38 + 0x1c; // 0x1c
										 *((intOrPtr*)(_t38 + 0x18)) = 0;
										 *_t46 = _t13;
										E6E2E3470();
										_t15 = _t38 + 0x38; // 0x38
										E6E2E4A20(_t15, _t38, _t42, _t43);
										E6E2E4650(_t38);
									}
								}
								 *_t46 = 0x6e2ea018;
								E6E2E32E0();
								_t25 = 0;
							}
							return _t25;
						}
					}
				}
			}

0x6e2e6780
0x6e2e6782
0x6e2e6789
0x6e2e678c
0x6e2e6791
0x6e2e6798
0x6e2e679a
0x6e2e67a1
0x6e2e6848
0x6e2e6848
0x6e2e684f
0x6e2e685e
0x6e2e67a7
0x6e2e67a7
0x6e2e67ac
0x00000000
0x6e2e67b2
0x6e2e67b6
0x6e2e67b9
0x6e2e67bd
0x6e2e67c3
0x6e2e67c8
0x00000000
0x6e2e67ca
0x6e2e67ca
0x6e2e67cf
0x6e2e6860
0x6e2e6867
0x6e2e686c
0x6e2e67d5
0x6e2e67d8
0x6e2e67db
0x6e2e67e2
0x6e2e67e7
0x6e2e67e9
0x6e2e67ec
0x6e2e67f2
0x6e2e67f7
0x6e2e67fc
0x6e2e67fe
0x6e2e6803
0x6e2e6805
0x6e2e6808
0x6e2e680a
0x6e2e680a
0x6e2e680d
0x6e2e6810
0x6e2e6817
0x6e2e681a
0x6e2e681f
0x6e2e6822
0x6e2e6829
0x6e2e6829
0x6e2e67fc
0x6e2e682e
0x6e2e6835
0x6e2e683a
0x6e2e683a
0x6e2e6841
0x6e2e6841
0x6e2e67c8
0x6e2e67ac

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6E2E678C

Part of subcall function 6E2E4C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C36
Part of subcall function 6E2E4C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C4B

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E679A
GetHandleInformation.KERNEL32 ref: 6E2E67BD
CloseHandle.KERNEL32 ref: 6E2E67F2
CloseHandle.KERNEL32 ref: 6E2E6808
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E681A
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E6835
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E684F
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E6867

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$Handle$Closepthread_mutex_lock$Information__pth_gpointer_lockedpthread_mutex_destroy
String ID:
API String ID: 3021062890-0
Opcode ID: 5207307e470aff03433dfcd32d375e4ccd25e555a74070def576cfec7e270f30
Instruction ID: 7209c8e790d23fa8fff8c6db6aa0f2846adcabb908e36c27a4855221c70cc218
Opcode Fuzzy Hash: 5207307e470aff03433dfcd32d375e4ccd25e555a74070def576cfec7e270f30
Instruction Fuzzy Hash: 5C2183B45142298BEB40EFB9E5C525B7BE6AF40305F800879D9848BA04D730D848CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E6B90 Relevance: 13.6, APIs: 9, Instructions: 67COMMON

Download Yara Rule

APIs

calloc.MSVCRT ref: 6E2E6BCA
pthread_mutex_init.LIBWINPTHREAD-1(?,?,?,?,?,6E2E16D4), ref: 6E2E6BEA
CreateSemaphoreA.KERNEL32 ref: 6E2E6C14
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E6C39
??3@YAXPAX@Z.MSVCRT ref: 6E2E6C48
_errno.MSVCRT ref: 6E2E6C4D
_errno.MSVCRT ref: 6E2E6C60
_errno.MSVCRT ref: 6E2E6C73
_errno.MSVCRT ref: 6E2E6C86

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: _errno$??3@CreateSemaphorecallocpthread_mutex_destroypthread_mutex_init
String ID:
API String ID: 4013580772-0
Opcode ID: 2e2085b86767d6a0b67686df3034d792c9b055e88ebf14efb739fa153361af67
Instruction ID: ad2bf5bb7791cab4307576a1a0e89593bc28eb292689717a11389e59896580a3
Opcode Fuzzy Hash: 2e2085b86767d6a0b67686df3034d792c9b055e88ebf14efb739fa153361af67
Instruction Fuzzy Hash: A021B07051972A8FE3406FA9C58C70A7BE6EF02765F568658ECA84B6D0D7358C00CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4A20 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 73
threadCOMMON

Download Yara Rule

C-Code - Quality: 24%

			E6E2E4A20(intOrPtr* __eax, void* __ebx, void* __edi, void* __esi) {
				void* _t251;
				int _t253;
				long _t255;
				void* _t257;
				signed int _t259;
				void* _t264;
				void* _t269;
				signed int _t270;
				signed char _t273;
				signed char _t274;
				signed int _t276;
				signed int _t282;
				signed char _t283;
				signed char _t287;
				int _t291;
				int _t296;
				intOrPtr* _t300;
				void* _t301;
				signed int _t302;
				void* _t304;
				signed char _t345;
				signed char _t374;
				void* _t379;
				void* _t380;
				signed int* _t382;
				void* _t383;
				void* _t387;
				signed int _t388;
				signed int _t394;
				void* _t400;
				intOrPtr* _t401;
				void* _t402;
				void** _t403;
				intOrPtr* _t404;
				signed char** _t405;
				void** _t407;
				signed int _t408;
				intOrPtr* _t409;

				if(__eax == 0) {
					return __eax;
				} else {
					_t300 = __eax;
					_t401 = _t400 + 0xffffff80;
					 *_t401 = __eax;
					_t251 = E6E2E4300();
					if(_t251 == 1) {
						_t301 = _t401 + 0x15;
						_t387 = "Error cleaning up spin_keys for thread ";
						_t253 = memcpy(_t301, _t387, 0xa << 2);
						_t402 = _t401 + 0xc;
						_t379 = _t402 + 0x3d;
						memset(_t379, _t253, 0x43 << 0);
						_t403 = _t402 + 0xc;
						_t380 = _t379 + 0x43;
						_t345 = 0;
						_t255 = GetCurrentThreadId();
						_t373 =  &(_t403[0xf]);
						_t403[2] = 0xa;
						_t403[1] =  &(_t403[0xf]);
						 *_t403 = _t255;
						 *0x6e2ef278();
						__eflags = _t403[0xf];
						_t257 = 0x27;
						if(_t403[0xf] != 0) {
							while(1) {
								_t257 = _t257 + 1;
								__eflags =  *((char*)(_t301 + _t257));
								if( *((char*)(_t301 + _t257)) == 0) {
									break;
								}
								__eflags = _t257 - 0x6a;
								if(_t257 != 0x6a) {
									continue;
								}
								goto L10;
							}
							__eflags = _t257 - 0x6a;
							if(_t257 != 0x6a) {
								goto L9;
							}
						} else {
							L9:
							 *((char*)(_t403 + _t257 + 0x15)) = 0xa;
							 *((char*)(_t403 + _t257 + 0x16)) = 0;
						}
						L10:
						 *_t403 = _t301;
						OutputDebugStringA(??);
						_push(_t257);
						abort();
						_push(_t380);
						_push(_t387);
						_push(_t301);
						_t404 = _t403 - 0x2c;
						__eflags =  *0x6e2ec050 - 1;
						if(__eflags != 0) {
							E6E2E4990(_t345, _t373, __eflags);
						}
						 *_t404 =  *0x6e2ea020;
						_t259 = TlsGetValue(??);
						_t405 = _t404 - 4;
						_t302 = _t259;
						__eflags = _t259;
						if(__eflags == 0) {
							_t388 = E6E2E48D0(__eflags);
							__eflags =  *0x6e2f0020;
							if( *0x6e2f0020 == 0) {
								goto L14;
							} else {
								__eflags = _t388;
								if(_t388 == 0) {
									goto L14;
								} else {
									 *(_t388 + 0x24) = 1;
									 *((intOrPtr*)(_t388 + 0x3c)) = GetCurrentThreadId();
									_t405[3] = 0;
									_t405[2] = 0;
									_t405[1] = 1;
									 *_t405 = 0;
									_t264 = CreateEventA(??, ??, ??, ??);
									 *((intOrPtr*)(_t388 + 0x1c)) = 0xffffffff;
									 *(_t388 + 0x18) = _t264;
									_t407 = _t405 - 0x10;
									_t21 = _t388 + 0x38; // 0x38
									E6E2E4A20(_t21, _t302, _t380, _t388);
									_t394 =  *0x6e2ef1a0;
									 *(_t388 + 0x64) = 0;
									 *(_t388 + 0x14) = 0;
									_t382 = GetCurrentProcess();
									_t304 = GetCurrentThread();
									_t269 = GetCurrentProcess();
									_t24 = _t388 + 0x14; // 0x14
									_t374 = _t24;
									_t407[2] = _t382;
									_t407[6] = 2;
									_t407[5] = 0;
									_t407[4] = 0;
									_t407[3] = _t374;
									_t407[1] = _t304;
									 *_t407 = _t269;
									_t270 = DuplicateHandle(??, ??, ??, ??, ??, ??, ??);
									_t408 = _t407 - 0x1c;
									__eflags = _t270;
									if(_t270 == 0) {
										L20:
										abort();
										asm("ud2");
										 *0 =  *(_t408 + 0x1c);
										asm("ud2");
										_t273 = _t408 + 0x14;
										 *0 = _t273;
										asm("ud2");
										asm("invalid");
										asm("invalid");
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										asm("invalid");
										asm("invalid");
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										 *_t273 =  *_t273 + _t273;
										__eflags =  *_t273;
										asm("das");
										if(__eflags <= 0) {
											L39:
											asm("bound esp, [ecx+0x72]");
											if(__eflags < 0) {
												goto L61;
											} else {
												goto L40;
											}
										} else {
											if(__eflags < 0) {
												L28:
												asm("popad");
												if(__eflags < 0) {
													goto L49;
												} else {
													if (__eflags >= 0) goto L40;
													goto L30;
												}
											} else {
												if(__eflags == 0) {
													L42:
													__eflags = _t274 - 0x494c203d;
													goto L43;
												} else {
													if(__eflags < 0) {
														L30:
														if(__eflags >= 0) {
															L40:
															if(__eflags < 0) {
																goto L47;
															} else {
																_t274 = _t273 - 0x6c61763e;
																_t408 =  *(_t274 + 0x3d) * 0x494c203d;
																__eflags = _t408;
																goto L42;
															}
														} else {
															if(__eflags > 0) {
																if(__eflags >= 0) {
																	 *[gs:0x6c202c73] =  *[gs:0x6c202c73] & _t273;
																	__eflags =  *[gs:0x6c202c73];
																	goto L60;
																} else {
																	 *[ds:eax] =  *[ds:eax] & _t374;
																	 *_t273 =  *_t273 - _t273;
																	_t345 =  &(1[_t345]);
																	__eflags = _t345;
																	if(__eflags >= 0) {
																		goto L74;
																	} else {
																		if(__eflags < 0) {
																			goto L75;
																		} else {
																			_t394 = _t382[0x1b] * 0x69616620;
																			__eflags = _t394;
																			goto L54;
																		}
																	}
																}
															} else {
																asm("outsb");
																if(__eflags < 0) {
																	L54:
																	asm("outsd");
																	asm("outsb");
																	goto L55;
																} else {
																	_push(0x64616572);
																	if(__eflags >= 0) {
																		L43:
																		__eflags = _t274 - 0x46494c20;
																		_t394 =  &(1[_t394]);
																		_pop(_t382);
																		_t374 =  &(1[_t374]);
																		_t345 =  &(1[_t345]);
																		__eflags = _t345;
																		_push(_t374);
																		_push(_t374);
																		goto L44;
																	} else {
																		if(__eflags >= 0) {
																			L57:
																			__eflags = _t273 -  *[fs:eax];
																			 *0x202c2973 =  *0x202c2973 - _t273;
																			__eflags =  *0x202c2973;
																		} else {
																			asm("arpl [edi], bp");
																			asm("bound esp, [ecx+0x72]");
																			if(__eflags < 0) {
																				L56:
																				_t394 =  *(_t394 + 0x64) * 0x2528203a;
																				__eflags = _t394;
																				goto L57;
																			} else {
																				if(__eflags < 0) {
																					L44:
																					_t345 = _t345 - 1;
																					_t394 =  &(1[_t394]);
																					_push(_t374);
																					 *_t274 =  *_t274 - _t408;
																					 *[es:eax] =  *[es:eax] & _t345;
																					 *_t274 =  *_t274 - _t345;
																					__eflags =  *_t274;
																					asm("bound esp, [ecx+0x72]");
																					if(__eflags < 0) {
																						goto L65;
																					} else {
																						if(__eflags < 0) {
																							goto L64;
																						} else {
																							if(__eflags == 0) {
																								L55:
																								_t51 = _t388 + 0x61;
																								 *_t51 =  *(_t388 + 0x61) & _t273;
																								__eflags =  *_t51;
																								goto L56;
																							} else {
																								L47:
																								_t345 = _t345 -  *_t345;
																								_t274 = _t273 -  *(_t374 + 0x61);
																								__eflags = _t274;
																								if(__eflags < 0) {
																									goto L71;
																								} else {
																									_t408 =  *(_t394 + 0x72) * 0x623e2d29;
																									__eflags = _t408;
																									L49:
																									_t273 = _t274 - 0x7375623e;
																									__eflags = _t273;
																								}
																							}
																						}
																					}
																				} else {
																					asm("arpl [eax], ax");
																					 *_t273 =  *_t273 - _t345;
																					_t44 = _t374 + 0x61;
																					 *_t44 =  *(_t374 + 0x61) - _t273;
																					__eflags =  *_t44;
																					if( *_t44 < 0) {
																						L60:
																						asm("insb");
																						_t394 =  *(_t388 + 0x65) * 0xa642520;
																						__eflags = _t394;
																						L61:
																						_t274 = _t273 & 0x00000a64;
																						_t56 = _t304 + 0x25;
																						 *_t56 =  *(_t304 + 0x25) + _t274;
																						__eflags =  *_t56;
																						if(__eflags < 0) {
																							L66:
																							asm("das");
																							if(__eflags <= 0) {
																								goto L92;
																							} else {
																								if(__eflags < 0) {
																									goto L79;
																								} else {
																									if(__eflags == 0) {
																										goto L96;
																									} else {
																										goto L69;
																									}
																								}
																							}
																						} else {
																							_t304 = _t304 + 1;
																							_t274 = (_t274 & 0x73252064 |  *(_t274 & 0x73252064)) & 0x64252070;
																							_t58 = _t388 + 0x3d;
																							 *_t58 =  *(_t388 + 0x3d) & _t374;
																							__eflags =  *_t58;
																							__eflags = _t274 - 0x20583025;
																							if(__eflags > 0) {
																								L78:
																								if (__eflags < 0) goto L101;
																								L79:
																								asm("popad");
																							} else {
																								L64:
																								_t274 = _t274 & 0x2520646c;
																								__eflags = _t274;
																								if(__eflags >= 0) {
																									L69:
																									if(__eflags < 0) {
																										if(__eflags >= 0) {
																											goto L94;
																										} else {
																											if(__eflags > 0) {
																												goto L104;
																											} else {
																												asm("outsb");
																												if(__eflags < 0) {
																													goto L109;
																												} else {
																													_push(0x64616572);
																													if(__eflags >= 0) {
																														goto L97;
																													} else {
																														if(__eflags >= 0) {
																															_t274 = _t274 - 0x20;
																															__eflags = _t274;
																															goto L111;
																														} else {
																															asm("arpl [edi], bp");
																															if(__eflags < 0) {
																																goto L112;
																															} else {
																																asm("insb");
																																goto L89;
																															}
																														}
																													}
																												}
																											}
																										}
																									} else {
																										asm("bound esi, [ebp+0x69]");
																										asm("insb");
																										asm("das");
																										asm("insd");
																										_t394 =  *(_t388 + 0x67) * 0x36772d77;
																										__eflags = _t394;
																										L71:
																										asm("a16 ja 0x30");
																										if(__eflags > 0) {
																											L89:
																											asm("outsd");
																											asm("arpl [ebx+0x2e], bp");
																											asm("arpl [eax], ax");
																											 *_t274 =  *_t274 + _t345;
																											 *_t274 =  *_t274 - _t345;
																											__eflags =  *_t274;
																											if(__eflags < 0) {
																												goto L114;
																											} else {
																												goto L90;
																											}
																										} else {
																											_t283 = _t274 ^ 0x0000002d;
																											_t61 = _t345 + 0x31;
																											 *_t61 =  *(_t345 + 0x31) ^ _t283;
																											__eflags =  *_t61;
																											_t274 = _t283 ^ 0x6438370d;
																											__eflags =  *_t382 - _t345;
																											L74:
																											asm("insd");
																											_t394 =  *(_t388 + 0x67) * 0x36772d77;
																											__eflags = _t394;
																											L75:
																											if(__eflags > 0) {
																												L90:
																												asm("insb");
																												asm("outsd");
																												asm("arpl [ebx+0x5f], bp");
																												if(__eflags == 0) {
																													goto L98;
																												} else {
																													_t345 = _t345 -  *_t345;
																													_t374 = _t374 -  *((intOrPtr*)(_t374 + 0x77));
																													__eflags = _t374;
																													goto L92;
																												}
																											} else {
																												if(__eflags > 0) {
																													L92:
																													if(__eflags > 0) {
																														L115:
																														if(__eflags >= 0) {
																															 *((intOrPtr*)(_t374 + 0x57)) =  *((intOrPtr*)(_t374 + 0x57)) + _t374;
																															_t408 = _t408 - 1;
																															_t282 = (_t274 & 0x73252064 |  *(_t274 & 0x73252064)) & 0x64252070;
																															__eflags = _t282;
																															 *[fs:esi+0x3d] =  *[fs:esi+0x3d] & _t374;
																															_t274 = _t282 & 0x42205830;
																															_t274 - 0x72206425 = _t274 - 0x20646c25;
																														}
																														 *[fs:edi+0x3d] =  *[fs:edi+0x3d] & _t374;
																														__eflags =  *[fs:edi+0x3d];
																													} else {
																														 *0x6c61763e =  *0x6c61763e - _t394;
																														__eflags =  *0x6c61763e;
																														L94:
																														if(__eflags <= 0) {
																															L113:
																															_t274 = _t274 |  *_t274;
																															__eflags = _t274;
																															_push(_t374);
																															_push(_t382);
																															L114:
																															_t408 = _t408 - 1;
																															_t274 = _t274 & 0x64252070;
																															__eflags = _t274;
																															goto L115;
																														} else {
																															asm("insb");
																															_t408 =  *(_t274 + 0x3d) * 0x494c203d;
																															__eflags = _t408;
																															L96:
																															_t388 =  &(1[_t388]);
																															__eflags = _t388;
																															L97:
																															_t394 =  &(1[_t394]);
																															_pop(_t383);
																															_push(_t374);
																															_push(_t383);
																															_t408 = _t408 - 1;
																															_t382 = _t383 - 1;
																															_t304 = _t304 + 1 - 1;
																															 *_t274 =  *_t274 - _t408;
																															 *[es:eax] =  *[es:eax] & _t345;
																															__eflags =  *[es:eax];
																															L98:
																															 *[es:eax] =  *[es:eax] & _t345;
																															 *_t274 =  *_t274 - _t345;
																															__eflags =  *_t274;
																															if(__eflags < 0) {
																																_t276 = _t274 & 0x73252070 |  *(_t274 & 0x73252070);
																																__eflags = _t276;
																															} else {
																																asm("insb");
																																asm("outsd");
																																asm("arpl [ebx+0x5f], bp");
																																if(__eflags == 0) {
																																	L108:
																																	asm("popa");
																																	_t394 =  *(_t394 + 0x64) * 0x2528203a;
																																	__eflags = _t394;
																																	L109:
																																	__eflags = _t274 -  *[fs:eax];
																																	 *0x202c2973 =  *0x202c2973 - _t274;
																																	__eflags =  *0x202c2973;
																																} else {
																																	_t345 = _t345 -  *_t345;
																																	_t374 = _t374 -  *((intOrPtr*)(_t374 + 0x77));
																																	asm("insb");
																																	 *0x7375623e =  *0x7375623e - _t394;
																																	__eflags =  *0x7375623e;
																																	asm("bound esi, [ds:ebp+0x73]");
																																	if(__eflags >= 0) {
																																		L111:
																																		__eflags =  *(_t394 + 0x20) * 0x7325;
																																		L112:
																																		_t274 = _t274 - 0x20;
																																		asm("insb");
																																		_t394 =  *(_t388 + 0x65) * 0xa642520;
																																		__eflags = _t394;
																																		goto L113;
																																	} else {
																																		 *[ds:eax] =  *[ds:eax] & _t374;
																																		 *_t274 =  *_t274 - _t274;
																																		__eflags =  *_t274;
																																		 *_t274 =  *_t274 + _t274;
																																		 *_t274 =  *_t274 + _t274;
																																		_t345 =  &(1[_t345]);
																																		__eflags = _t345;
																																		L104:
																																		if(__eflags >= 0) {
																																			_t382[0x1b] = _t382[0x1b] & _t345;
																																			asm("arpl [ebp+0x20], sp");
																																			goto L127;
																																		} else {
																																			if (__eflags < 0) goto L127;
																																			if(__eflags < 0) {
																																				L127:
																																				 *[gs:0x73692070] =  *[gs:0x73692070] & _t274;
																																				 *0xa64 =  *0xa64 & _t274;
																																				_t78 = _t394 + 0x72;
																																				 *_t78 =  *(_t394 + 0x72) + _t274;
																																				__eflags =  *_t78;
																																				if (__eflags < 0) goto L139;
																																				asm("outsd");
																																			} else {
																																				_t394 = _t382[0x1b] * 0x69616620;
																																				__eflags = _t394;
																																				goto L108;
																																			}
																																		}
																																	}
																																}
																															}
																														}
																													}
																												} else {
																													_t274 = _t274 ^ 0x0000002d;
																													asm("insb");
																													_t408 =  *(_t374 + 0x72) * 0x65697261;
																													__eflags = _t408;
																													goto L78;
																												}
																											}
																										}
																									}
																								} else {
																									L65:
																									 *_t274 =  *_t274 + _t274;
																									 *_t382 =  *_t382 + _t345;
																									__eflags =  *_t382;
																									goto L66;
																								}
																							}
																						}
																					} else {
																						_t408 =  *(_t394 + 0x72) * 0x2a20745f;
																						 *_t374 =  *_t374 - _t394;
																						__eflags =  *_t374;
																						goto L39;
																					}
																				}
																			}
																		}
																	}
																}
															}
														}
													} else {
														asm("bound esi, [ebp+0x69]");
														asm("insb");
														asm("das");
														asm("insd");
														_t287 = _t273 ^ 0x0000002d;
														 *(_t345 + 0x31) =  *(_t345 + 0x31) ^ _t287;
														__eflags =  *_t382 - _t345;
														asm("insd");
														_t394 =  *(_t388 + 0x67) * 0x36772d77;
														_t274 = _t287 ^ 0x64383720;
														asm("insb");
														_t408 =  *(_t374 + 0x72) * 0x65697261;
														__eflags = _t408;
														goto L28;
													}
												}
											}
										}
										_t274 = _t274 |  *_t274;
										__eflags = _t274;
									} else {
										 *_t408 =  *(_t388 + 0x14);
										_t291 = GetThreadPriority(??);
										 *(_t388 + 0x68) = 0;
										 *(_t388 + 0x6c) = _t291;
										_t409 = _t408 - 4;
										 *(_t388 + 0x20) =  *(_t388 + 0x20) & 0xcf | 0x00000010;
										 *(_t409 + 4) = _t388;
										 *_t409 =  *0x6e2ea020;
										_t296 = TlsSetValue(??, ??);
										_t408 = _t409 - 8;
										__eflags = _t296;
										if(_t296 == 0) {
											goto L20;
										} else {
											return _t388;
										}
									}
								}
							}
						} else {
							L14:
							return _t302;
						}
					} else {
						 *_t300 = 0xffffffff;
						return _t251;
					}
				}
			}

0x6e2e4a22
0x6e2e4a50
0x6e2e4a24
0x6e2e4a27
0x6e2e4a29
0x6e2e4a2c
0x6e2e4a2f
0x6e2e4a37
0x6e2e4a51
0x6e2e4a57
0x6e2e4a63
0x6e2e4a63
0x6e2e4a65
0x6e2e4a6e
0x6e2e4a6e
0x6e2e4a6e
0x6e2e4a6e
0x6e2e4a70
0x6e2e4a76
0x6e2e4a7a
0x6e2e4a82
0x6e2e4a86
0x6e2e4a89
0x6e2e4a8f
0x6e2e4a94
0x6e2e4a99
0x6e2e4aa5
0x6e2e4aa5
0x6e2e4aa8
0x6e2e4aac
0x00000000
0x00000000
0x6e2e4aa0
0x6e2e4aa3
0x00000000
0x00000000
0x00000000
0x6e2e4aa3
0x6e2e4aae
0x6e2e4ab1
0x00000000
0x00000000
0x6e2e4a9b
0x6e2e4ab3
0x6e2e4ab3
0x6e2e4ab8
0x6e2e4ab8
0x6e2e4abd
0x6e2e4abd
0x6e2e4ac0
0x6e2e4ac6
0x6e2e4ac7
0x6e2e4ad1
0x6e2e4ad2
0x6e2e4ad3
0x6e2e4ad4
0x6e2e4ad7
0x6e2e4ade
0x6e2e4ae0
0x6e2e4ae0
0x6e2e4aea
0x6e2e4aed
0x6e2e4af3
0x6e2e4af6
0x6e2e4af8
0x6e2e4afa
0x6e2e4b15
0x6e2e4b1c
0x6e2e4b1e
0x00000000
0x6e2e4b20
0x6e2e4b20
0x6e2e4b22
0x00000000
0x6e2e4b24
0x6e2e4b24
0x6e2e4b31
0x6e2e4b34
0x6e2e4b3c
0x6e2e4b44
0x6e2e4b4c
0x6e2e4b53
0x6e2e4b59
0x6e2e4b60
0x6e2e4b63
0x6e2e4b66
0x6e2e4b69
0x6e2e4b6e
0x6e2e4b74
0x6e2e4b7b
0x6e2e4b84
0x6e2e4b8c
0x6e2e4b8e
0x6e2e4b90
0x6e2e4b90
0x6e2e4b93
0x6e2e4b97
0x6e2e4b9f
0x6e2e4ba7
0x6e2e4baf
0x6e2e4bb3
0x6e2e4bb7
0x6e2e4bba
0x6e2e4bc0
0x6e2e4bc3
0x6e2e4bc5
0x6e2e95c5
0x6e2e95c5
0x6e2e95cf
0x6e2e95d5
0x6e2e95da
0x6e2e95dc
0x6e2e95e0
0x6e2e95e5
0x6e2e95e8
0x6e2e95ea
0x6e2e95ec
0x6e2e95ee
0x6e2e95f0
0x6e2e95f2
0x6e2e95f4
0x6e2e95f6
0x6e2e95f8
0x6e2e95fa
0x6e2e95fc
0x6e2e95fe
0x6e2e9600
0x6e2e9602
0x6e2e9604
0x6e2e9606
0x6e2e9608
0x6e2e960a
0x6e2e960c
0x6e2e960e
0x6e2e9610
0x6e2e9612
0x6e2e9614
0x6e2e9616
0x6e2e9618
0x6e2e961a
0x6e2e961c
0x6e2e961e
0x6e2e9620
0x6e2e9622
0x6e2e9624
0x6e2e9626
0x6e2e9628
0x6e2e962a
0x6e2e962c
0x6e2e962e
0x6e2e9630
0x6e2e9632
0x6e2e9634
0x6e2e9636
0x6e2e9638
0x6e2e963a
0x6e2e963c
0x6e2e963e
0x6e2e9640
0x6e2e9642
0x6e2e9644
0x6e2e9646
0x6e2e9648
0x6e2e964a
0x6e2e964c
0x6e2e964e
0x6e2e9650
0x6e2e9652
0x6e2e9654
0x6e2e9656
0x6e2e9658
0x6e2e965a
0x6e2e965c
0x6e2e965e
0x6e2e9660
0x6e2e9662
0x6e2e9664
0x6e2e9666
0x6e2e9668
0x6e2e966a
0x6e2e966c
0x6e2e966e
0x6e2e9670
0x6e2e9672
0x6e2e9674
0x6e2e9676
0x6e2e9678
0x6e2e967a
0x6e2e967c
0x6e2e967e
0x6e2e9680
0x6e2e9682
0x6e2e9684
0x6e2e9686
0x6e2e9688
0x6e2e968a
0x6e2e968c
0x6e2e968e
0x6e2e9690
0x6e2e9692
0x6e2e9694
0x6e2e9696
0x6e2e9698
0x6e2e969a
0x6e2e969c
0x6e2e969e
0x6e2e96a0
0x6e2e96a2
0x6e2e96a4
0x6e2e96a6
0x6e2e96a8
0x6e2e96aa
0x6e2e96ac
0x6e2e96ae
0x6e2e96b0
0x6e2e96b2
0x6e2e96b4
0x6e2e96b6
0x6e2e96b8
0x6e2e96ba
0x6e2e96bc
0x6e2e96be
0x6e2e96c0
0x6e2e96c2
0x6e2e96c4
0x6e2e96c6
0x6e2e96c8
0x6e2e96ca
0x6e2e96cc
0x6e2e96ce
0x6e2e96d0
0x6e2e96d2
0x6e2e96d4
0x6e2e96d6
0x6e2e96d8
0x6e2e96da
0x6e2e96dc
0x6e2e96de
0x6e2e96e0
0x6e2e96e2
0x6e2e96e4
0x6e2e96e6
0x6e2e96e8
0x6e2e96ea
0x6e2e96ec
0x6e2e96ee
0x6e2e96f0
0x6e2e96f2
0x6e2e96f4
0x6e2e96f6
0x6e2e96f8
0x6e2e96fa
0x6e2e96fc
0x6e2e96fe
0x6e2e9700
0x6e2e9702
0x6e2e9704
0x6e2e9706
0x6e2e9708
0x6e2e970a
0x6e2e970c
0x6e2e970e
0x6e2e9710
0x6e2e9712
0x6e2e9714
0x6e2e9716
0x6e2e9718
0x6e2e971a
0x6e2e971c
0x6e2e971e
0x6e2e9720
0x6e2e9722
0x6e2e9724
0x6e2e9726
0x6e2e9728
0x6e2e972a
0x6e2e972c
0x6e2e972e
0x6e2e9730
0x6e2e9732
0x6e2e9734
0x6e2e9736
0x6e2e9738
0x6e2e973a
0x6e2e973c
0x6e2e973e
0x6e2e9740
0x6e2e9742
0x6e2e9744
0x6e2e9746
0x6e2e9748
0x6e2e974a
0x6e2e974c
0x6e2e974e
0x6e2e9750
0x6e2e9752
0x6e2e9754
0x6e2e9756
0x6e2e9758
0x6e2e975a
0x6e2e975c
0x6e2e975e
0x6e2e9760
0x6e2e9762
0x6e2e9764
0x6e2e9766
0x6e2e9768
0x6e2e976a
0x6e2e976c
0x6e2e976e
0x6e2e9770
0x6e2e9772
0x6e2e9774
0x6e2e9776
0x6e2e9778
0x6e2e977a
0x6e2e977c
0x6e2e977e
0x6e2e9780
0x6e2e9782
0x6e2e9784
0x6e2e9786
0x6e2e9788
0x6e2e978a
0x6e2e978c
0x6e2e978e
0x6e2e9790
0x6e2e9792
0x6e2e9794
0x6e2e9796
0x6e2e9798
0x6e2e979a
0x6e2e979c
0x6e2e979e
0x6e2e97a0
0x6e2e97a2
0x6e2e97a4
0x6e2e97a6
0x6e2e97a8
0x6e2e97aa
0x6e2e97ac
0x6e2e97ae
0x6e2e97b0
0x6e2e97b2
0x6e2e97b4
0x6e2e97b6
0x6e2e97b8
0x6e2e97ba
0x6e2e97bc
0x6e2e97be
0x6e2e97c0
0x6e2e97c2
0x6e2e97c4
0x6e2e97c6
0x6e2e97c8
0x6e2e97ca
0x6e2e97cc
0x6e2e97ce
0x6e2e97d0
0x6e2e97d2
0x6e2e97d4
0x6e2e97d6
0x6e2e97d8
0x6e2e97da
0x6e2e97dc
0x6e2e97de
0x6e2e97e0
0x6e2e97e2
0x6e2e97e4
0x6e2e97e6
0x6e2e97e8
0x6e2e97ea
0x6e2e97ec
0x6e2e97ee
0x6e2e97f0
0x6e2e97f2
0x6e2e97f4
0x6e2e97f6
0x6e2e97f8
0x6e2e97fa
0x6e2e97fc
0x6e2e97fe
0x6e2e9800
0x6e2e9802
0x6e2e9804
0x6e2e9806
0x6e2e9808
0x6e2e980a
0x6e2e980c
0x6e2e980e
0x6e2e9810
0x6e2e9812
0x6e2e9814
0x6e2e9816
0x6e2e9818
0x6e2e981a
0x6e2e981c
0x6e2e981e
0x6e2e9820
0x6e2e9822
0x6e2e9824
0x6e2e9826
0x6e2e9828
0x6e2e982a
0x6e2e982c
0x6e2e982e
0x6e2e9830
0x6e2e9832
0x6e2e9834
0x6e2e9836
0x6e2e9838
0x6e2e983a
0x6e2e983c
0x6e2e983e
0x6e2e9840
0x6e2e9842
0x6e2e9844
0x6e2e9846
0x6e2e9848
0x6e2e984a
0x6e2e984c
0x6e2e984e
0x6e2e9850
0x6e2e9852
0x6e2e9854
0x6e2e9856
0x6e2e9858
0x6e2e985a
0x6e2e985c
0x6e2e985e
0x6e2e9860
0x6e2e9862
0x6e2e9864
0x6e2e9866
0x6e2e9868
0x6e2e986a
0x6e2e986c
0x6e2e986e
0x6e2e9870
0x6e2e9872
0x6e2e9874
0x6e2e9876
0x6e2e9878
0x6e2e987a
0x6e2e987c
0x6e2e987e
0x6e2e9880
0x6e2e9882
0x6e2e9884
0x6e2e9886
0x6e2e9888
0x6e2e988a
0x6e2e988c
0x6e2e988e
0x6e2e9890
0x6e2e9892
0x6e2e9894
0x6e2e9896
0x6e2e9898
0x6e2e989a
0x6e2e989c
0x6e2e989e
0x6e2e98a0
0x6e2e98a2
0x6e2e98a4
0x6e2e98a6
0x6e2e98a8
0x6e2e98aa
0x6e2e98ac
0x6e2e98ae
0x6e2e98b0
0x6e2e98b2
0x6e2e98b4
0x6e2e98b6
0x6e2e98b8
0x6e2e98ba
0x6e2e98bc
0x6e2e98be
0x6e2e98c0
0x6e2e98c2
0x6e2e98c4
0x6e2e98c6
0x6e2e98c8
0x6e2e98ca
0x6e2e98cc
0x6e2e98ce
0x6e2e98d0
0x6e2e98d2
0x6e2e98d4
0x6e2e98d6
0x6e2e98d8
0x6e2e98da
0x6e2e98dc
0x6e2e98de
0x6e2e98e0
0x6e2e98e2
0x6e2e98e4
0x6e2e98e6
0x6e2e98e8
0x6e2e98ea
0x6e2e98ec
0x6e2e98ee
0x6e2e98f0
0x6e2e98f2
0x6e2e98f4
0x6e2e98f6
0x6e2e98f8
0x6e2e98fa
0x6e2e98fc
0x6e2e98fe
0x6e2e9900
0x6e2e9902
0x6e2e9904
0x6e2e9906
0x6e2e9908
0x6e2e990a
0x6e2e990c
0x6e2e990e
0x6e2e9910
0x6e2e9912
0x6e2e9914
0x6e2e9916
0x6e2e9918
0x6e2e991a
0x6e2e991c
0x6e2e991e
0x6e2e9920
0x6e2e9922
0x6e2e9924
0x6e2e9926
0x6e2e9928
0x6e2e992a
0x6e2e992c
0x6e2e992e
0x6e2e9930
0x6e2e9932
0x6e2e9934
0x6e2e9936
0x6e2e9938
0x6e2e993a
0x6e2e993c
0x6e2e993e
0x6e2e9940
0x6e2e9942
0x6e2e9944
0x6e2e9946
0x6e2e9948
0x6e2e994a
0x6e2e994c
0x6e2e994e
0x6e2e9950
0x6e2e9952
0x6e2e9954
0x6e2e9956
0x6e2e9958
0x6e2e995a
0x6e2e995c
0x6e2e995e
0x6e2e9960
0x6e2e9962
0x6e2e9964
0x6e2e9966
0x6e2e9968
0x6e2e996a
0x6e2e996c
0x6e2e996e
0x6e2e9970
0x6e2e9972
0x6e2e9974
0x6e2e9976
0x6e2e9978
0x6e2e997a
0x6e2e997c
0x6e2e997e
0x6e2e9980
0x6e2e9982
0x6e2e9984
0x6e2e9986
0x6e2e9988
0x6e2e998a
0x6e2e998c
0x6e2e998e
0x6e2e9990
0x6e2e9992
0x6e2e9994
0x6e2e9996
0x6e2e9998
0x6e2e999a
0x6e2e999c
0x6e2e999e
0x6e2e99a0
0x6e2e99a2
0x6e2e99a4
0x6e2e99a6
0x6e2e99a8
0x6e2e99aa
0x6e2e99ac
0x6e2e99ae
0x6e2e99b0
0x6e2e99b2
0x6e2e99b4
0x6e2e99b6
0x6e2e99b8
0x6e2e99ba
0x6e2e99bc
0x6e2e99be
0x6e2e99c0
0x6e2e99c2
0x6e2e99c4
0x6e2e99c6
0x6e2e99c8
0x6e2e99ca
0x6e2e99cc
0x6e2e99ce
0x6e2e99d0
0x6e2e99d2
0x6e2e99d4
0x6e2e99d6
0x6e2e99d8
0x6e2e99da
0x6e2e99dc
0x6e2e99de
0x6e2e99e0
0x6e2e99e2
0x6e2e99e4
0x6e2e99e6
0x6e2e99e8
0x6e2e99ea
0x6e2e99ec
0x6e2e99ee
0x6e2e99f0
0x6e2e99f2
0x6e2e99f4
0x6e2e99f6
0x6e2e99f8
0x6e2e99fa
0x6e2e99fc
0x6e2e99fe
0x6e2e9a00
0x6e2e9a02
0x6e2e9a04
0x6e2e9a06
0x6e2e9a08
0x6e2e9a0a
0x6e2e9a0c
0x6e2e9a0e
0x6e2e9a10
0x6e2e9a12
0x6e2e9a14
0x6e2e9a16
0x6e2e9a18
0x6e2e9a1a
0x6e2e9a1c
0x6e2e9a1e
0x6e2e9a20
0x6e2e9a22
0x6e2e9a24
0x6e2e9a26
0x6e2e9a28
0x6e2e9a2a
0x6e2e9a2c
0x6e2e9a2e
0x6e2e9a30
0x6e2e9a32
0x6e2e9a34
0x6e2e9a36
0x6e2e9a38
0x6e2e9a3a
0x6e2e9a3c
0x6e2e9a3e
0x6e2e9a40
0x6e2e9a42
0x6e2e9a44
0x6e2e9a46
0x6e2e9a48
0x6e2e9a4a
0x6e2e9a4c
0x6e2e9a4e
0x6e2e9a50
0x6e2e9a52
0x6e2e9a54
0x6e2e9a56
0x6e2e9a58
0x6e2e9a5a
0x6e2e9a5c
0x6e2e9a5e
0x6e2e9a60
0x6e2e9a62
0x6e2e9a64
0x6e2e9a66
0x6e2e9a68
0x6e2e9a6a
0x6e2e9a6c
0x6e2e9a6e
0x6e2e9a70
0x6e2e9a72
0x6e2e9a74
0x6e2e9a76
0x6e2e9a78
0x6e2e9a7a
0x6e2e9a7c
0x6e2e9a7e
0x6e2e9a80
0x6e2e9a82
0x6e2e9a84
0x6e2e9a86
0x6e2e9a88
0x6e2e9a8a
0x6e2e9a8c
0x6e2e9a8e
0x6e2e9a90
0x6e2e9a92
0x6e2e9a94
0x6e2e9a96
0x6e2e9a98
0x6e2e9a9a
0x6e2e9a9c
0x6e2e9a9e
0x6e2e9aa0
0x6e2e9aa2
0x6e2e9aa4
0x6e2e9aa6
0x6e2e9aa8
0x6e2e9aaa
0x6e2e9aac
0x6e2e9aae
0x6e2e9ab0
0x6e2e9ab2
0x6e2e9ab4
0x6e2e9ab6
0x6e2e9ab8
0x6e2e9aba
0x6e2e9abc
0x6e2e9abe
0x6e2e9ac0
0x6e2e9ac2
0x6e2e9ac4
0x6e2e9ac6
0x6e2e9ac8
0x6e2e9aca
0x6e2e9acc
0x6e2e9ace
0x6e2e9ad0
0x6e2e9ad2
0x6e2e9ad4
0x6e2e9ad6
0x6e2e9ad8
0x6e2e9ada
0x6e2e9adc
0x6e2e9ade
0x6e2e9ae0
0x6e2e9ae2
0x6e2e9ae4
0x6e2e9ae6
0x6e2e9ae8
0x6e2e9aea
0x6e2e9aec
0x6e2e9aee
0x6e2e9af0
0x6e2e9af2
0x6e2e9af4
0x6e2e9af6
0x6e2e9af8
0x6e2e9afa
0x6e2e9afc
0x6e2e9afe
0x6e2e9b00
0x6e2e9b02
0x6e2e9b04
0x6e2e9b06
0x6e2e9b08
0x6e2e9b0a
0x6e2e9b0c
0x6e2e9b0e
0x6e2e9b10
0x6e2e9b12
0x6e2e9b14
0x6e2e9b16
0x6e2e9b18
0x6e2e9b1a
0x6e2e9b1c
0x6e2e9b1e
0x6e2e9b20
0x6e2e9b22
0x6e2e9b24
0x6e2e9b26
0x6e2e9b28
0x6e2e9b2a
0x6e2e9b2c
0x6e2e9b2e
0x6e2e9b30
0x6e2e9b32
0x6e2e9b34
0x6e2e9b36
0x6e2e9b38
0x6e2e9b3a
0x6e2e9b3c
0x6e2e9b3e
0x6e2e9b40
0x6e2e9b42
0x6e2e9b44
0x6e2e9b46
0x6e2e9b48
0x6e2e9b4a
0x6e2e9b4c
0x6e2e9b4e
0x6e2e9b50
0x6e2e9b52
0x6e2e9b54
0x6e2e9b56
0x6e2e9b58
0x6e2e9b5a
0x6e2e9b5c
0x6e2e9b5e
0x6e2e9b60
0x6e2e9b62
0x6e2e9b64
0x6e2e9b66
0x6e2e9b68
0x6e2e9b6a
0x6e2e9b6c
0x6e2e9b6e
0x6e2e9b70
0x6e2e9b72
0x6e2e9b74
0x6e2e9b76
0x6e2e9b78
0x6e2e9b7a
0x6e2e9b7c
0x6e2e9b7e
0x6e2e9b80
0x6e2e9b82
0x6e2e9b84
0x6e2e9b86
0x6e2e9b88
0x6e2e9b8a
0x6e2e9b8c
0x6e2e9b8e
0x6e2e9b90
0x6e2e9b92
0x6e2e9b94
0x6e2e9b96
0x6e2e9b98
0x6e2e9b9a
0x6e2e9b9c
0x6e2e9b9e
0x6e2e9ba0
0x6e2e9ba2
0x6e2e9ba4
0x6e2e9ba6
0x6e2e9ba8
0x6e2e9baa
0x6e2e9bac
0x6e2e9bae
0x6e2e9bb0
0x6e2e9bb2
0x6e2e9bb4
0x6e2e9bb6
0x6e2e9bb8
0x6e2e9bba
0x6e2e9bbc
0x6e2e9bbe
0x6e2e9bc0
0x6e2e9bc2
0x6e2e9bc4
0x6e2e9bc6
0x6e2e9bc8
0x6e2e9bca
0x6e2e9bcc
0x6e2e9bce
0x6e2e9bd0
0x6e2e9bd2
0x6e2e9bd4
0x6e2e9bd6
0x6e2e9bd8
0x6e2e9bda
0x6e2e9bdc
0x6e2e9bde
0x6e2e9be0
0x6e2e9be2
0x6e2e9be4
0x6e2e9be6
0x6e2e9be8
0x6e2e9bea
0x6e2e9bec
0x6e2e9bee
0x6e2e9bf0
0x6e2e9bf2
0x6e2e9bf4
0x6e2e9bf6
0x6e2e9bf8
0x6e2e9bfa
0x6e2e9bfc
0x6e2e9bfe
0x6e2e9c00
0x6e2e9c02
0x6e2e9c04
0x6e2e9c06
0x6e2e9c08
0x6e2e9c0a
0x6e2e9c0c
0x6e2e9c0e
0x6e2e9c10
0x6e2e9c12
0x6e2e9c14
0x6e2e9c16
0x6e2e9c18
0x6e2e9c1a
0x6e2e9c1c
0x6e2e9c1e
0x6e2e9c20
0x6e2e9c22
0x6e2e9c24
0x6e2e9c26
0x6e2e9c28
0x6e2e9c2a
0x6e2e9c2c
0x6e2e9c2e
0x6e2e9c30
0x6e2e9c32
0x6e2e9c34
0x6e2e9c36
0x6e2e9c38
0x6e2e9c3a
0x6e2e9c3c
0x6e2e9c3e
0x6e2e9c40
0x6e2e9c42
0x6e2e9c44
0x6e2e9c46
0x6e2e9c48
0x6e2e9c4a
0x6e2e9c4c
0x6e2e9c4e
0x6e2e9c50
0x6e2e9c52
0x6e2e9c54
0x6e2e9c56
0x6e2e9c58
0x6e2e9c5a
0x6e2e9c5c
0x6e2e9c5e
0x6e2e9c60
0x6e2e9c62
0x6e2e9c64
0x6e2e9c66
0x6e2e9c68
0x6e2e9c6a
0x6e2e9c6c
0x6e2e9c6e
0x6e2e9c70
0x6e2e9c72
0x6e2e9c74
0x6e2e9c76
0x6e2e9c78
0x6e2e9c7a
0x6e2e9c7c
0x6e2e9c7e
0x6e2e9c80
0x6e2e9c82
0x6e2e9c84
0x6e2e9c86
0x6e2e9c88
0x6e2e9c8a
0x6e2e9c8c
0x6e2e9c8e
0x6e2e9c90
0x6e2e9c92
0x6e2e9c94
0x6e2e9c96
0x6e2e9c98
0x6e2e9c9a
0x6e2e9c9c
0x6e2e9c9e
0x6e2e9ca0
0x6e2e9ca2
0x6e2e9ca4
0x6e2e9ca6
0x6e2e9ca8
0x6e2e9caa
0x6e2e9cac
0x6e2e9cae
0x6e2e9cb0
0x6e2e9cb2
0x6e2e9cb4
0x6e2e9cb6
0x6e2e9cb8
0x6e2e9cba
0x6e2e9cbc
0x6e2e9cbe
0x6e2e9cc0
0x6e2e9cc2
0x6e2e9cc4
0x6e2e9cc6
0x6e2e9cc8
0x6e2e9cca
0x6e2e9ccc
0x6e2e9cce
0x6e2e9cd0
0x6e2e9cd2
0x6e2e9cd4
0x6e2e9cd6
0x6e2e9cd8
0x6e2e9cda
0x6e2e9cdc
0x6e2e9cde
0x6e2e9ce0
0x6e2e9ce2
0x6e2e9ce4
0x6e2e9ce6
0x6e2e9ce8
0x6e2e9cea
0x6e2e9cec
0x6e2e9cee
0x6e2e9cf0
0x6e2e9cf2
0x6e2e9cf4
0x6e2e9cf6
0x6e2e9cf8
0x6e2e9cfa
0x6e2e9cfc
0x6e2e9cfe
0x6e2e9d00
0x6e2e9d02
0x6e2e9d04
0x6e2e9d06
0x6e2e9d08
0x6e2e9d0a
0x6e2e9d0c
0x6e2e9d0e
0x6e2e9d10
0x6e2e9d12
0x6e2e9d14
0x6e2e9d16
0x6e2e9d18
0x6e2e9d1a
0x6e2e9d1c
0x6e2e9d1e
0x6e2e9d20
0x6e2e9d22
0x6e2e9d24
0x6e2e9d26
0x6e2e9d28
0x6e2e9d2a
0x6e2e9d2c
0x6e2e9d2e
0x6e2e9d30
0x6e2e9d32
0x6e2e9d34
0x6e2e9d36
0x6e2e9d38
0x6e2e9d3a
0x6e2e9d3c
0x6e2e9d3e
0x6e2e9d40
0x6e2e9d42
0x6e2e9d44
0x6e2e9d46
0x6e2e9d48
0x6e2e9d4a
0x6e2e9d4c
0x6e2e9d4e
0x6e2e9d50
0x6e2e9d52
0x6e2e9d54
0x6e2e9d56
0x6e2e9d58
0x6e2e9d5a
0x6e2e9d5c
0x6e2e9d5e
0x6e2e9d60
0x6e2e9d62
0x6e2e9d64
0x6e2e9d66
0x6e2e9d68
0x6e2e9d6a
0x6e2e9d6c
0x6e2e9d6e
0x6e2e9d70
0x6e2e9d72
0x6e2e9d74
0x6e2e9d76
0x6e2e9d78
0x6e2e9d7a
0x6e2e9d7c
0x6e2e9d7e
0x6e2e9d80
0x6e2e9d82
0x6e2e9d84
0x6e2e9d86
0x6e2e9d88
0x6e2e9d8a
0x6e2e9d8c
0x6e2e9d8e
0x6e2e9d90
0x6e2e9d92
0x6e2e9d94
0x6e2e9d96
0x6e2e9d98
0x6e2e9d9a
0x6e2e9d9c
0x6e2e9d9e
0x6e2e9da0
0x6e2e9da2
0x6e2e9da4
0x6e2e9da6
0x6e2e9da8
0x6e2e9daa
0x6e2e9dac
0x6e2e9dae
0x6e2e9db0
0x6e2e9db2
0x6e2e9db4
0x6e2e9db6
0x6e2e9db8
0x6e2e9dba
0x6e2e9dbc
0x6e2e9dbe
0x6e2e9dc0
0x6e2e9dc2
0x6e2e9dc4
0x6e2e9dc6
0x6e2e9dc8
0x6e2e9dca
0x6e2e9dcc
0x6e2e9dce
0x6e2e9dd0
0x6e2e9dd2
0x6e2e9dd4
0x6e2e9dd6
0x6e2e9dd8
0x6e2e9dda
0x6e2e9ddc
0x6e2e9dde
0x6e2e9de0
0x6e2e9de2
0x6e2e9de4
0x6e2e9de6
0x6e2e9de8
0x6e2e9dea
0x6e2e9dec
0x6e2e9dee
0x6e2e9df0
0x6e2e9df2
0x6e2e9df4
0x6e2e9df6
0x6e2e9df8
0x6e2e9dfa
0x6e2e9dfc
0x6e2e9dfe
0x6e2e9e00
0x6e2e9e02
0x6e2e9e04
0x6e2e9e06
0x6e2e9e08
0x6e2e9e0a
0x6e2e9e0c
0x6e2e9e0e
0x6e2e9e10
0x6e2e9e12
0x6e2e9e14
0x6e2e9e16
0x6e2e9e18
0x6e2e9e1a
0x6e2e9e1c
0x6e2e9e1e
0x6e2e9e20
0x6e2e9e22
0x6e2e9e24
0x6e2e9e26
0x6e2e9e28
0x6e2e9e2a
0x6e2e9e2c
0x6e2e9e2e
0x6e2e9e30
0x6e2e9e32
0x6e2e9e34
0x6e2e9e36
0x6e2e9e38
0x6e2e9e3a
0x6e2e9e3c
0x6e2e9e3e
0x6e2e9e40
0x6e2e9e42
0x6e2e9e44
0x6e2e9e46
0x6e2e9e48
0x6e2e9e4a
0x6e2e9e4c
0x6e2e9e4e
0x6e2e9e50
0x6e2e9e52
0x6e2e9e54
0x6e2e9e56
0x6e2e9e58
0x6e2e9e5a
0x6e2e9e5c
0x6e2e9e5e
0x6e2e9e60
0x6e2e9e62
0x6e2e9e64
0x6e2e9e66
0x6e2e9e68
0x6e2e9e6a
0x6e2e9e6c
0x6e2e9e6e
0x6e2e9e70
0x6e2e9e72
0x6e2e9e74
0x6e2e9e76
0x6e2e9e78
0x6e2e9e7a
0x6e2e9e7c
0x6e2e9e7e
0x6e2e9e80
0x6e2e9e82
0x6e2e9e84
0x6e2e9e86
0x6e2e9e88
0x6e2e9e8a
0x6e2e9e8c
0x6e2e9e8e
0x6e2e9e90
0x6e2e9e92
0x6e2e9e94
0x6e2e9e96
0x6e2e9e98
0x6e2e9e9a
0x6e2e9e9c
0x6e2e9e9e
0x6e2e9ea0
0x6e2e9ea2
0x6e2e9ea4
0x6e2e9ea6
0x6e2e9ea8
0x6e2e9eaa
0x6e2e9eac
0x6e2e9eae
0x6e2e9eb0
0x6e2e9eb2
0x6e2e9eb4
0x6e2e9eb6
0x6e2e9eb8
0x6e2e9eba
0x6e2e9ebc
0x6e2e9ebe
0x6e2e9ec0
0x6e2e9ec2
0x6e2e9ec4
0x6e2e9ec6
0x6e2e9ec8
0x6e2e9eca
0x6e2e9ecc
0x6e2e9ece
0x6e2e9ed0
0x6e2e9ed2
0x6e2e9ed4
0x6e2e9ed6
0x6e2e9ed8
0x6e2e9eda
0x6e2e9edc
0x6e2e9ede
0x6e2e9ee0
0x6e2e9ee2
0x6e2e9ee4
0x6e2e9ee6
0x6e2e9ee8
0x6e2e9eea
0x6e2e9eec
0x6e2e9eee
0x6e2e9ef0
0x6e2e9ef2
0x6e2e9ef4
0x6e2e9ef6
0x6e2e9ef8
0x6e2e9efa
0x6e2e9efc
0x6e2e9efe
0x6e2e9f00
0x6e2e9f02
0x6e2e9f04
0x6e2e9f06
0x6e2e9f08
0x6e2e9f0a
0x6e2e9f0c
0x6e2e9f0e
0x6e2e9f10
0x6e2e9f12
0x6e2e9f14
0x6e2e9f16
0x6e2e9f18
0x6e2e9f1a
0x6e2e9f1c
0x6e2e9f1e
0x6e2e9f20
0x6e2e9f22
0x6e2e9f24
0x6e2e9f26
0x6e2e9f28
0x6e2e9f2a
0x6e2e9f2c
0x6e2e9f2e
0x6e2e9f30
0x6e2e9f32
0x6e2e9f34
0x6e2e9f36
0x6e2e9f38
0x6e2e9f3a
0x6e2e9f3c
0x6e2e9f3e
0x6e2e9f40
0x6e2e9f42
0x6e2e9f44
0x6e2e9f46
0x6e2e9f48
0x6e2e9f4a
0x6e2e9f4c
0x6e2e9f4e
0x6e2e9f50
0x6e2e9f52
0x6e2e9f54
0x6e2e9f56
0x6e2e9f58
0x6e2e9f5a
0x6e2e9f5c
0x6e2e9f5e
0x6e2e9f60
0x6e2e9f62
0x6e2e9f64
0x6e2e9f66
0x6e2e9f68
0x6e2e9f6a
0x6e2e9f6c
0x6e2e9f6e
0x6e2e9f70
0x6e2e9f72
0x6e2e9f74
0x6e2e9f76
0x6e2e9f78
0x6e2e9f7a
0x6e2e9f7c
0x6e2e9f7e
0x6e2e9f80
0x6e2e9f82
0x6e2e9f84
0x6e2e9f86
0x6e2e9f88
0x6e2e9f8a
0x6e2e9f8c
0x6e2e9f8e
0x6e2e9f90
0x6e2e9f92
0x6e2e9f94
0x6e2e9f96
0x6e2e9f98
0x6e2e9f9a
0x6e2e9f9c
0x6e2e9f9e
0x6e2e9fa0
0x6e2e9fa2
0x6e2e9fa4
0x6e2e9fa6
0x6e2e9fa8
0x6e2e9faa
0x6e2e9fac
0x6e2e9fae
0x6e2e9fb0
0x6e2e9fb2
0x6e2e9fb4
0x6e2e9fb6
0x6e2e9fb8
0x6e2e9fba
0x6e2e9fbc
0x6e2e9fbe
0x6e2e9fc0
0x6e2e9fc2
0x6e2e9fc4
0x6e2e9fc6
0x6e2e9fc8
0x6e2e9fca
0x6e2e9fcc
0x6e2e9fce
0x6e2e9fd0
0x6e2e9fd2
0x6e2e9fd4
0x6e2e9fd6
0x6e2e9fd8
0x6e2e9fda
0x6e2e9fdc
0x6e2e9fde
0x6e2e9fe0
0x6e2e9fe2
0x6e2e9fe4
0x6e2e9fe6
0x6e2e9fe8
0x6e2e9fea
0x6e2e9fec
0x6e2e9fee
0x6e2e9ff0
0x6e2e9ff2
0x6e2e9ff4
0x6e2e9ff6
0x6e2e9ff8
0x6e2e9ffa
0x6e2e9ffc
0x6e2e9ffe
0x6e2ea000
0x6e2ea002
0x6e2ea004
0x6e2ea006
0x6e2ea008
0x6e2ea00a
0x6e2ea00c
0x6e2ea00e
0x6e2ea010
0x6e2ea012
0x6e2ea014
0x6e2ea016
0x6e2ea018
0x6e2ea01a
0x6e2ea01c
0x6e2ea01e
0x6e2ea020
0x6e2ea022
0x6e2ea024
0x6e2ea026
0x6e2ea028
0x6e2ea02a
0x6e2ea02c
0x6e2ea02e
0x6e2ea030
0x6e2ea032
0x6e2ea034
0x6e2ea036
0x6e2ea038
0x6e2ea03a
0x6e2ea03c
0x6e2ea03e
0x6e2ea040
0x6e2ea042
0x6e2ea044
0x6e2ea046
0x6e2ea048
0x6e2ea04a
0x6e2ea04c
0x6e2ea04e
0x6e2ea050
0x6e2ea052
0x6e2ea054
0x6e2ea056
0x6e2ea058
0x6e2ea05a
0x6e2ea05c
0x6e2ea05e
0x6e2ea060
0x6e2ea062
0x6e2ea064
0x6e2ea066
0x6e2ea068
0x6e2ea06a
0x6e2ea06c
0x6e2ea06e
0x6e2ea070
0x6e2ea072
0x6e2ea074
0x6e2ea076
0x6e2ea078
0x6e2ea07a
0x6e2ea07c
0x6e2ea07e
0x6e2ea080
0x6e2ea082
0x6e2ea084
0x6e2ea086
0x6e2ea088
0x6e2ea08a
0x6e2ea08c
0x6e2ea08e
0x6e2ea090
0x6e2ea092
0x6e2ea094
0x6e2ea096
0x6e2ea098
0x6e2ea09a
0x6e2ea09c
0x6e2ea09e
0x6e2ea0a0
0x6e2ea0a2
0x6e2ea0a4
0x6e2ea0a6
0x6e2ea0a8
0x6e2ea0aa
0x6e2ea0ac
0x6e2ea0ae
0x6e2ea0b0
0x6e2ea0b2
0x6e2ea0b4
0x6e2ea0b6
0x6e2ea0b8
0x6e2ea0ba
0x6e2ea0bc
0x6e2ea0be
0x6e2ea0c0
0x6e2ea0c2
0x6e2ea0c4
0x6e2ea0c6
0x6e2ea0c8
0x6e2ea0ca
0x6e2ea0cc
0x6e2ea0ce
0x6e2ea0d0
0x6e2ea0d2
0x6e2ea0d4
0x6e2ea0d6
0x6e2ea0d8
0x6e2ea0da
0x6e2ea0dc
0x6e2ea0de
0x6e2ea0e0
0x6e2ea0e2
0x6e2ea0e4
0x6e2ea0e6
0x6e2ea0e8
0x6e2ea0ea
0x6e2ea0ec
0x6e2ea0ee
0x6e2ea0f0
0x6e2ea0f2
0x6e2ea0f4
0x6e2ea0f6
0x6e2ea0f8
0x6e2ea0fa
0x6e2ea0fc
0x6e2ea0fe
0x6e2ea100
0x6e2ea102
0x6e2ea104
0x6e2ea106
0x6e2ea108
0x6e2ea10a
0x6e2ea10c
0x6e2ea10e
0x6e2ea110
0x6e2ea112
0x6e2ea114
0x6e2ea116
0x6e2ea118
0x6e2ea11a
0x6e2ea11c
0x6e2ea11e
0x6e2ea120
0x6e2ea122
0x6e2ea124
0x6e2ea126
0x6e2ea128
0x6e2ea12a
0x6e2ea12c
0x6e2ea12e
0x6e2ea130
0x6e2ea132
0x6e2ea134
0x6e2ea136
0x6e2ea138
0x6e2ea13a
0x6e2ea13c
0x6e2ea13e
0x6e2ea140
0x6e2ea142
0x6e2ea144
0x6e2ea146
0x6e2ea148
0x6e2ea14a
0x6e2ea14c
0x6e2ea14e
0x6e2ea150
0x6e2ea152
0x6e2ea154
0x6e2ea156
0x6e2ea158
0x6e2ea15a
0x6e2ea15c
0x6e2ea15e
0x6e2ea160
0x6e2ea162
0x6e2ea164
0x6e2ea166
0x6e2ea168
0x6e2ea16a
0x6e2ea16c
0x6e2ea16e
0x6e2ea170
0x6e2ea172
0x6e2ea174
0x6e2ea176
0x6e2ea178
0x6e2ea17a
0x6e2ea17c
0x6e2ea17e
0x6e2ea180
0x6e2ea182
0x6e2ea184
0x6e2ea186
0x6e2ea188
0x6e2ea18a
0x6e2ea18c
0x6e2ea18e
0x6e2ea190
0x6e2ea192
0x6e2ea194
0x6e2ea196
0x6e2ea198
0x6e2ea19a
0x6e2ea19c
0x6e2ea19e
0x6e2ea1a0
0x6e2ea1a2
0x6e2ea1a4
0x6e2ea1a6
0x6e2ea1a8
0x6e2ea1aa
0x6e2ea1ac
0x6e2ea1ae
0x6e2ea1b0
0x6e2ea1b2
0x6e2ea1b4
0x6e2ea1b6
0x6e2ea1b8
0x6e2ea1ba
0x6e2ea1bc
0x6e2ea1be
0x6e2ea1c0
0x6e2ea1c2
0x6e2ea1c4
0x6e2ea1c6
0x6e2ea1c8
0x6e2ea1ca
0x6e2ea1cc
0x6e2ea1ce
0x6e2ea1d0
0x6e2ea1d2
0x6e2ea1d4
0x6e2ea1d6
0x6e2ea1d8
0x6e2ea1da
0x6e2ea1dc
0x6e2ea1de
0x6e2ea1e0
0x6e2ea1e2
0x6e2ea1e4
0x6e2ea1e6
0x6e2ea1e8
0x6e2ea1ea
0x6e2ea1ec
0x6e2ea1ee
0x6e2ea1f0
0x6e2ea1f2
0x6e2ea1f4
0x6e2ea1f6
0x6e2ea1f8
0x6e2ea1fa
0x6e2ea1fc
0x6e2ea1fe
0x6e2ea200
0x6e2ea202
0x6e2ea204
0x6e2ea206
0x6e2ea208
0x6e2ea20a
0x6e2ea20c
0x6e2ea20e
0x6e2ea210
0x6e2ea212
0x6e2ea214
0x6e2ea216
0x6e2ea218
0x6e2ea21a
0x6e2ea21c
0x6e2ea21e
0x6e2ea220
0x6e2ea222
0x6e2ea224
0x6e2ea226
0x6e2ea228
0x6e2ea22a
0x6e2ea22c
0x6e2ea22e
0x6e2ea230
0x6e2ea232
0x6e2ea234
0x6e2ea236
0x6e2ea238
0x6e2ea23a
0x6e2ea23c
0x6e2ea23e
0x6e2ea240
0x6e2ea242
0x6e2ea244
0x6e2ea246
0x6e2ea248
0x6e2ea24a
0x6e2ea24c
0x6e2ea24e
0x6e2ea250
0x6e2ea252
0x6e2ea254
0x6e2ea256
0x6e2ea258
0x6e2ea25a
0x6e2ea25c
0x6e2ea25e
0x6e2ea260
0x6e2ea262
0x6e2ea264
0x6e2ea266
0x6e2ea268
0x6e2ea26a
0x6e2ea26c
0x6e2ea26e
0x6e2ea270
0x6e2ea272
0x6e2ea274
0x6e2ea276
0x6e2ea278
0x6e2ea27a
0x6e2ea27c
0x6e2ea27e
0x6e2ea280
0x6e2ea282
0x6e2ea284
0x6e2ea286
0x6e2ea288
0x6e2ea28a
0x6e2ea28c
0x6e2ea28e
0x6e2ea290
0x6e2ea292
0x6e2ea294
0x6e2ea296
0x6e2ea298
0x6e2ea29a
0x6e2ea29c
0x6e2ea29e
0x6e2ea2a0
0x6e2ea2a2
0x6e2ea2a4
0x6e2ea2a6
0x6e2ea2a8
0x6e2ea2aa
0x6e2ea2ac
0x6e2ea2ae
0x6e2ea2b0
0x6e2ea2b2
0x6e2ea2b4
0x6e2ea2b6
0x6e2ea2b8
0x6e2ea2ba
0x6e2ea2bc
0x6e2ea2be
0x6e2ea2c0
0x6e2ea2c2
0x6e2ea2c4
0x6e2ea2c6
0x6e2ea2c8
0x6e2ea2ca
0x6e2ea2cc
0x6e2ea2ce
0x6e2ea2d0
0x6e2ea2d2
0x6e2ea2d4
0x6e2ea2d6
0x6e2ea2d8
0x6e2ea2da
0x6e2ea2dc
0x6e2ea2de
0x6e2ea2e0
0x6e2ea2e2
0x6e2ea2e4
0x6e2ea2e6
0x6e2ea2e8
0x6e2ea2ea
0x6e2ea2ec
0x6e2ea2ee
0x6e2ea2f0
0x6e2ea2f2
0x6e2ea2f4
0x6e2ea2f6
0x6e2ea2f8
0x6e2ea2fa
0x6e2ea2fc
0x6e2ea2fe
0x6e2ea300
0x6e2ea302
0x6e2ea304
0x6e2ea306
0x6e2ea308
0x6e2ea30a
0x6e2ea30c
0x6e2ea30e
0x6e2ea310
0x6e2ea312
0x6e2ea314
0x6e2ea316
0x6e2ea318
0x6e2ea31a
0x6e2ea31c
0x6e2ea31e
0x6e2ea320
0x6e2ea322
0x6e2ea324
0x6e2ea326
0x6e2ea328
0x6e2ea32a
0x6e2ea32c
0x6e2ea32e
0x6e2ea330
0x6e2ea332
0x6e2ea334
0x6e2ea336
0x6e2ea338
0x6e2ea33a
0x6e2ea33c
0x6e2ea33e
0x6e2ea340
0x6e2ea342
0x6e2ea344
0x6e2ea346
0x6e2ea348
0x6e2ea34a
0x6e2ea34c
0x6e2ea34e
0x6e2ea350
0x6e2ea352
0x6e2ea354
0x6e2ea356
0x6e2ea358
0x6e2ea35a
0x6e2ea35c
0x6e2ea35e
0x6e2ea360
0x6e2ea362
0x6e2ea364
0x6e2ea366
0x6e2ea368
0x6e2ea36a
0x6e2ea36c
0x6e2ea36e
0x6e2ea370
0x6e2ea372
0x6e2ea374
0x6e2ea376
0x6e2ea378
0x6e2ea37a
0x6e2ea37c
0x6e2ea37e
0x6e2ea380
0x6e2ea382
0x6e2ea384
0x6e2ea386
0x6e2ea388
0x6e2ea38a
0x6e2ea38c
0x6e2ea38e
0x6e2ea390
0x6e2ea392
0x6e2ea394
0x6e2ea396
0x6e2ea398
0x6e2ea39a
0x6e2ea39c
0x6e2ea39e
0x6e2ea3a0
0x6e2ea3a2
0x6e2ea3a4
0x6e2ea3a6
0x6e2ea3a8
0x6e2ea3aa
0x6e2ea3ac
0x6e2ea3ae
0x6e2ea3b0
0x6e2ea3b2
0x6e2ea3b4
0x6e2ea3b6
0x6e2ea3b8
0x6e2ea3ba
0x6e2ea3bc
0x6e2ea3be
0x6e2ea3c0
0x6e2ea3c2
0x6e2ea3c4
0x6e2ea3c6
0x6e2ea3c8
0x6e2ea3ca
0x6e2ea3cc
0x6e2ea3ce
0x6e2ea3d0
0x6e2ea3d2
0x6e2ea3d4
0x6e2ea3d6
0x6e2ea3d8
0x6e2ea3da
0x6e2ea3dc
0x6e2ea3de
0x6e2ea3e0
0x6e2ea3e2
0x6e2ea3e4
0x6e2ea3e6
0x6e2ea3e8
0x6e2ea3ea
0x6e2ea3ec
0x6e2ea3ee
0x6e2ea3f0
0x6e2ea3f2
0x6e2ea3f4
0x6e2ea3f6
0x6e2ea3f8
0x6e2ea3fa
0x6e2ea3fc
0x6e2ea3fe
0x6e2ea400
0x6e2ea402
0x6e2ea404
0x6e2ea406
0x6e2ea408
0x6e2ea40a
0x6e2ea40c
0x6e2ea40e
0x6e2ea410
0x6e2ea412
0x6e2ea414
0x6e2ea416
0x6e2ea418
0x6e2ea41a
0x6e2ea41c
0x6e2ea41e
0x6e2ea420
0x6e2ea422
0x6e2ea424
0x6e2ea426
0x6e2ea428
0x6e2ea42a
0x6e2ea42c
0x6e2ea42e
0x6e2ea430
0x6e2ea432
0x6e2ea434
0x6e2ea436
0x6e2ea438
0x6e2ea43a
0x6e2ea43c
0x6e2ea43e
0x6e2ea440
0x6e2ea442
0x6e2ea444
0x6e2ea446
0x6e2ea448
0x6e2ea44a
0x6e2ea44c
0x6e2ea44e
0x6e2ea450
0x6e2ea452
0x6e2ea454
0x6e2ea456
0x6e2ea458
0x6e2ea45a
0x6e2ea45c
0x6e2ea45e
0x6e2ea460
0x6e2ea462
0x6e2ea464
0x6e2ea466
0x6e2ea468
0x6e2ea46a
0x6e2ea46c
0x6e2ea46e
0x6e2ea470
0x6e2ea472
0x6e2ea474
0x6e2ea476
0x6e2ea478
0x6e2ea47a
0x6e2ea47c
0x6e2ea47e
0x6e2ea480
0x6e2ea482
0x6e2ea484
0x6e2ea486
0x6e2ea488
0x6e2ea48a
0x6e2ea48c
0x6e2ea48e
0x6e2ea490
0x6e2ea492
0x6e2ea494
0x6e2ea496
0x6e2ea498
0x6e2ea49a
0x6e2ea49c
0x6e2ea49e
0x6e2ea4a0
0x6e2ea4a2
0x6e2ea4a4
0x6e2ea4a6
0x6e2ea4a8
0x6e2ea4aa
0x6e2ea4ac
0x6e2ea4ae
0x6e2ea4b0
0x6e2ea4b2
0x6e2ea4b4
0x6e2ea4b6
0x6e2ea4b8
0x6e2ea4ba
0x6e2ea4bc
0x6e2ea4be
0x6e2ea4c0
0x6e2ea4c2
0x6e2ea4c4
0x6e2ea4c6
0x6e2ea4c8
0x6e2ea4ca
0x6e2ea4cc
0x6e2ea4ce
0x6e2ea4d0
0x6e2ea4d2
0x6e2ea4d4
0x6e2ea4d6
0x6e2ea4d8
0x6e2ea4da
0x6e2ea4dc
0x6e2ea4de
0x6e2ea4e0
0x6e2ea4e2
0x6e2ea4e4
0x6e2ea4e6
0x6e2ea4e8
0x6e2ea4ea
0x6e2ea4ec
0x6e2ea4ee
0x6e2ea4f0
0x6e2ea4f2
0x6e2ea4f4
0x6e2ea4f6
0x6e2ea4f8
0x6e2ea4fa
0x6e2ea4fc
0x6e2ea4fe
0x6e2ea500
0x6e2ea502
0x6e2ea504
0x6e2ea506
0x6e2ea508
0x6e2ea50a
0x6e2ea50c
0x6e2ea50e
0x6e2ea510
0x6e2ea512
0x6e2ea514
0x6e2ea516
0x6e2ea518
0x6e2ea51a
0x6e2ea51c
0x6e2ea51e
0x6e2ea520
0x6e2ea522
0x6e2ea524
0x6e2ea526
0x6e2ea528
0x6e2ea52a
0x6e2ea52c
0x6e2ea52e
0x6e2ea530
0x6e2ea532
0x6e2ea534
0x6e2ea536
0x6e2ea538
0x6e2ea53a
0x6e2ea53c
0x6e2ea53e
0x6e2ea540
0x6e2ea542
0x6e2ea544
0x6e2ea546
0x6e2ea548
0x6e2ea54a
0x6e2ea54c
0x6e2ea54e
0x6e2ea550
0x6e2ea552
0x6e2ea554
0x6e2ea556
0x6e2ea558
0x6e2ea55a
0x6e2ea55c
0x6e2ea55e
0x6e2ea560
0x6e2ea562
0x6e2ea564
0x6e2ea566
0x6e2ea568
0x6e2ea56a
0x6e2ea56c
0x6e2ea56e
0x6e2ea570
0x6e2ea572
0x6e2ea574
0x6e2ea576
0x6e2ea578
0x6e2ea57a
0x6e2ea57c
0x6e2ea57e
0x6e2ea580
0x6e2ea582
0x6e2ea584
0x6e2ea586
0x6e2ea588
0x6e2ea58a
0x6e2ea58c
0x6e2ea58e
0x6e2ea590
0x6e2ea592
0x6e2ea594
0x6e2ea596
0x6e2ea598
0x6e2ea59a
0x6e2ea59c
0x6e2ea59e
0x6e2ea5a0
0x6e2ea5a2
0x6e2ea5a4
0x6e2ea5a6
0x6e2ea5a8
0x6e2ea5aa
0x6e2ea5ac
0x6e2ea5ae
0x6e2ea5b0
0x6e2ea5b2
0x6e2ea5b4
0x6e2ea5b6
0x6e2ea5b8
0x6e2ea5ba
0x6e2ea5bc
0x6e2ea5be
0x6e2ea5c0
0x6e2ea5c2
0x6e2ea5c4
0x6e2ea5c6
0x6e2ea5c8
0x6e2ea5ca
0x6e2ea5cc
0x6e2ea5ce
0x6e2ea5d0
0x6e2ea5d2
0x6e2ea5d4
0x6e2ea5d6
0x6e2ea5d8
0x6e2ea5da
0x6e2ea5dc
0x6e2ea5de
0x6e2ea5e0
0x6e2ea5e2
0x6e2ea5e4
0x6e2ea5e6
0x6e2ea5e8
0x6e2ea5ea
0x6e2ea5ec
0x6e2ea5ee
0x6e2ea5f0
0x6e2ea5f2
0x6e2ea5f4
0x6e2ea5f6
0x6e2ea5f8
0x6e2ea5fa
0x6e2ea5fc
0x6e2ea5fe
0x6e2ea600
0x6e2ea602
0x6e2ea604
0x6e2ea606
0x6e2ea608
0x6e2ea60a
0x6e2ea60c
0x6e2ea60e
0x6e2ea610
0x6e2ea612
0x6e2ea614
0x6e2ea616
0x6e2ea618
0x6e2ea61a
0x6e2ea61c
0x6e2ea61e
0x6e2ea620
0x6e2ea622
0x6e2ea624
0x6e2ea626
0x6e2ea628
0x6e2ea62a
0x6e2ea62c
0x6e2ea62e
0x6e2ea630
0x6e2ea632
0x6e2ea634
0x6e2ea636
0x6e2ea638
0x6e2ea63a
0x6e2ea63c
0x6e2ea63e
0x6e2ea640
0x6e2ea642
0x6e2ea644
0x6e2ea646
0x6e2ea648
0x6e2ea64a
0x6e2ea64c
0x6e2ea64e
0x6e2ea650
0x6e2ea652
0x6e2ea654
0x6e2ea656
0x6e2ea658
0x6e2ea65a
0x6e2ea65c
0x6e2ea65e
0x6e2ea660
0x6e2ea662
0x6e2ea664
0x6e2ea666
0x6e2ea668
0x6e2ea66a
0x6e2ea66c
0x6e2ea66e
0x6e2ea670
0x6e2ea672
0x6e2ea674
0x6e2ea676
0x6e2ea678
0x6e2ea67a
0x6e2ea67c
0x6e2ea67e
0x6e2ea680
0x6e2ea682
0x6e2ea684
0x6e2ea686
0x6e2ea688
0x6e2ea68a
0x6e2ea68c
0x6e2ea68e
0x6e2ea690
0x6e2ea692
0x6e2ea694
0x6e2ea696
0x6e2ea698
0x6e2ea69a
0x6e2ea69c
0x6e2ea69e
0x6e2ea6a0
0x6e2ea6a2
0x6e2ea6a4
0x6e2ea6a6
0x6e2ea6a8
0x6e2ea6aa
0x6e2ea6ac
0x6e2ea6ae
0x6e2ea6b0
0x6e2ea6b2
0x6e2ea6b4
0x6e2ea6b6
0x6e2ea6b8
0x6e2ea6ba
0x6e2ea6bc
0x6e2ea6be
0x6e2ea6c0
0x6e2ea6c2
0x6e2ea6c4
0x6e2ea6c6
0x6e2ea6c8
0x6e2ea6ca
0x6e2ea6cc
0x6e2ea6ce
0x6e2ea6d0
0x6e2ea6d2
0x6e2ea6d4
0x6e2ea6d6
0x6e2ea6d8
0x6e2ea6da
0x6e2ea6dc
0x6e2ea6de
0x6e2ea6e0
0x6e2ea6e2
0x6e2ea6e4
0x6e2ea6e6
0x6e2ea6e8
0x6e2ea6ea
0x6e2ea6ec
0x6e2ea6ee
0x6e2ea6f0
0x6e2ea6f2
0x6e2ea6f4
0x6e2ea6f6
0x6e2ea6f8
0x6e2ea6fa
0x6e2ea6fc
0x6e2ea6fe
0x6e2ea700
0x6e2ea702
0x6e2ea704
0x6e2ea706
0x6e2ea708
0x6e2ea70a
0x6e2ea70c
0x6e2ea70e
0x6e2ea710
0x6e2ea712
0x6e2ea714
0x6e2ea716
0x6e2ea718
0x6e2ea71a
0x6e2ea71c
0x6e2ea71e
0x6e2ea720
0x6e2ea722
0x6e2ea724
0x6e2ea726
0x6e2ea728
0x6e2ea72a
0x6e2ea72c
0x6e2ea72e
0x6e2ea730
0x6e2ea732
0x6e2ea734
0x6e2ea736
0x6e2ea738
0x6e2ea73a
0x6e2ea73c
0x6e2ea73e
0x6e2ea740
0x6e2ea742
0x6e2ea744
0x6e2ea746
0x6e2ea748
0x6e2ea74a
0x6e2ea74c
0x6e2ea74e
0x6e2ea750
0x6e2ea752
0x6e2ea754
0x6e2ea756
0x6e2ea758
0x6e2ea75a
0x6e2ea75c
0x6e2ea75e
0x6e2ea760
0x6e2ea762
0x6e2ea764
0x6e2ea766
0x6e2ea768
0x6e2ea76a
0x6e2ea76c
0x6e2ea76e
0x6e2ea770
0x6e2ea772
0x6e2ea774
0x6e2ea776
0x6e2ea778
0x6e2ea77a
0x6e2ea77c
0x6e2ea77e
0x6e2ea780
0x6e2ea782
0x6e2ea784
0x6e2ea786
0x6e2ea788
0x6e2ea78a
0x6e2ea78c
0x6e2ea78e
0x6e2ea790
0x6e2ea792
0x6e2ea794
0x6e2ea796
0x6e2ea798
0x6e2ea79a
0x6e2ea79c
0x6e2ea79e
0x6e2ea7a0
0x6e2ea7a2
0x6e2ea7a4
0x6e2ea7a6
0x6e2ea7a8
0x6e2ea7aa
0x6e2ea7ac
0x6e2ea7ae
0x6e2ea7b0
0x6e2ea7b2
0x6e2ea7b4
0x6e2ea7b6
0x6e2ea7b8
0x6e2ea7ba
0x6e2ea7bc
0x6e2ea7be
0x6e2ea7c0
0x6e2ea7c2
0x6e2ea7c4
0x6e2ea7c6
0x6e2ea7c8
0x6e2ea7ca
0x6e2ea7cc
0x6e2ea7ce
0x6e2ea7d0
0x6e2ea7d2
0x6e2ea7d4
0x6e2ea7d6
0x6e2ea7d8
0x6e2ea7da
0x6e2ea7dc
0x6e2ea7de
0x6e2ea7e0
0x6e2ea7e2
0x6e2ea7e4
0x6e2ea7e6
0x6e2ea7e8
0x6e2ea7ea
0x6e2ea7ec
0x6e2ea7ee
0x6e2ea7f0
0x6e2ea7f2
0x6e2ea7f4
0x6e2ea7f6
0x6e2ea7f8
0x6e2ea7fa
0x6e2ea7fc
0x6e2ea7fe
0x6e2ea800
0x6e2ea802
0x6e2ea804
0x6e2ea806
0x6e2ea808
0x6e2ea80a
0x6e2ea80c
0x6e2ea80e
0x6e2ea810
0x6e2ea812
0x6e2ea814
0x6e2ea816
0x6e2ea818
0x6e2ea81a
0x6e2ea81c
0x6e2ea81e
0x6e2ea820
0x6e2ea822
0x6e2ea824
0x6e2ea826
0x6e2ea828
0x6e2ea82a
0x6e2ea82c
0x6e2ea82e
0x6e2ea830
0x6e2ea832
0x6e2ea834
0x6e2ea836
0x6e2ea838
0x6e2ea83a
0x6e2ea83c
0x6e2ea83e
0x6e2ea840
0x6e2ea842
0x6e2ea844
0x6e2ea846
0x6e2ea848
0x6e2ea84a
0x6e2ea84c
0x6e2ea84e
0x6e2ea850
0x6e2ea852
0x6e2ea854
0x6e2ea856
0x6e2ea858
0x6e2ea85a
0x6e2ea85c
0x6e2ea85e
0x6e2ea860
0x6e2ea862
0x6e2ea864
0x6e2ea866
0x6e2ea868
0x6e2ea86a
0x6e2ea86c
0x6e2ea86e
0x6e2ea870
0x6e2ea872
0x6e2ea874
0x6e2ea876
0x6e2ea878
0x6e2ea87a
0x6e2ea87c
0x6e2ea87e
0x6e2ea880
0x6e2ea882
0x6e2ea884
0x6e2ea886
0x6e2ea888
0x6e2ea88a
0x6e2ea88c
0x6e2ea88e
0x6e2ea890
0x6e2ea892
0x6e2ea894
0x6e2ea896
0x6e2ea898
0x6e2ea89a
0x6e2ea89c
0x6e2ea89e
0x6e2ea8a0
0x6e2ea8a2
0x6e2ea8a4
0x6e2ea8a6
0x6e2ea8a8
0x6e2ea8aa
0x6e2ea8ac
0x6e2ea8ae
0x6e2ea8b0
0x6e2ea8b2
0x6e2ea8b4
0x6e2ea8b6
0x6e2ea8b8
0x6e2ea8ba
0x6e2ea8bc
0x6e2ea8be
0x6e2ea8c0
0x6e2ea8c2
0x6e2ea8c4
0x6e2ea8c6
0x6e2ea8c8
0x6e2ea8ca
0x6e2ea8cc
0x6e2ea8ce
0x6e2ea8d0
0x6e2ea8d2
0x6e2ea8d4
0x6e2ea8d6
0x6e2ea8d8
0x6e2ea8da
0x6e2ea8dc
0x6e2ea8de
0x6e2ea8e0
0x6e2ea8e2
0x6e2ea8e4
0x6e2ea8e6
0x6e2ea8e8
0x6e2ea8ea
0x6e2ea8ec
0x6e2ea8ee
0x6e2ea8f0
0x6e2ea8f2
0x6e2ea8f4
0x6e2ea8f6
0x6e2ea8f8
0x6e2ea8fa
0x6e2ea8fc
0x6e2ea8fe
0x6e2ea900
0x6e2ea902
0x6e2ea904
0x6e2ea906
0x6e2ea908
0x6e2ea90a
0x6e2ea90c
0x6e2ea90e
0x6e2ea910
0x6e2ea912
0x6e2ea914
0x6e2ea916
0x6e2ea918
0x6e2ea91a
0x6e2ea91c
0x6e2ea91e
0x6e2ea920
0x6e2ea922
0x6e2ea924
0x6e2ea926
0x6e2ea928
0x6e2ea92a
0x6e2ea92c
0x6e2ea92e
0x6e2ea930
0x6e2ea932
0x6e2ea934
0x6e2ea936
0x6e2ea938
0x6e2ea93a
0x6e2ea93c
0x6e2ea93e
0x6e2ea940
0x6e2ea942
0x6e2ea944
0x6e2ea946
0x6e2ea948
0x6e2ea94a
0x6e2ea94c
0x6e2ea94e
0x6e2ea950
0x6e2ea952
0x6e2ea954
0x6e2ea956
0x6e2ea958
0x6e2ea95a
0x6e2ea95c
0x6e2ea95e
0x6e2ea960
0x6e2ea962
0x6e2ea964
0x6e2ea966
0x6e2ea968
0x6e2ea96a
0x6e2ea96c
0x6e2ea96e
0x6e2ea970
0x6e2ea972
0x6e2ea974
0x6e2ea976
0x6e2ea978
0x6e2ea97a
0x6e2ea97c
0x6e2ea97e
0x6e2ea980
0x6e2ea982
0x6e2ea984
0x6e2ea986
0x6e2ea988
0x6e2ea98a
0x6e2ea98c
0x6e2ea98e
0x6e2ea990
0x6e2ea992
0x6e2ea994
0x6e2ea996
0x6e2ea998
0x6e2ea99a
0x6e2ea99c
0x6e2ea99e
0x6e2ea9a0
0x6e2ea9a2
0x6e2ea9a4
0x6e2ea9a6
0x6e2ea9a8
0x6e2ea9aa
0x6e2ea9ac
0x6e2ea9ae
0x6e2ea9b0
0x6e2ea9b2
0x6e2ea9b4
0x6e2ea9b6
0x6e2ea9b8
0x6e2ea9ba
0x6e2ea9bc
0x6e2ea9be
0x6e2ea9c0
0x6e2ea9c2
0x6e2ea9c4
0x6e2ea9c6
0x6e2ea9c8
0x6e2ea9ca
0x6e2ea9cc
0x6e2ea9ce
0x6e2ea9d0
0x6e2ea9d2
0x6e2ea9d4
0x6e2ea9d6
0x6e2ea9d8
0x6e2ea9da
0x6e2ea9dc
0x6e2ea9de
0x6e2ea9e0
0x6e2ea9e2
0x6e2ea9e4
0x6e2ea9e6
0x6e2ea9e8
0x6e2ea9ea
0x6e2ea9ec
0x6e2ea9ee
0x6e2ea9f0
0x6e2ea9f2
0x6e2ea9f4
0x6e2ea9f6
0x6e2ea9f8
0x6e2ea9fa
0x6e2ea9fc
0x6e2ea9fe
0x6e2eaa00
0x6e2eaa02
0x6e2eaa04
0x6e2eaa06
0x6e2eaa08
0x6e2eaa0a
0x6e2eaa0c
0x6e2eaa0e
0x6e2eaa10
0x6e2eaa12
0x6e2eaa14
0x6e2eaa16
0x6e2eaa18
0x6e2eaa1a
0x6e2eaa1c
0x6e2eaa1e
0x6e2eaa20
0x6e2eaa22
0x6e2eaa24
0x6e2eaa26
0x6e2eaa28
0x6e2eaa2a
0x6e2eaa2c
0x6e2eaa2e
0x6e2eaa30
0x6e2eaa32
0x6e2eaa34
0x6e2eaa36
0x6e2eaa38
0x6e2eaa3a
0x6e2eaa3c
0x6e2eaa3e
0x6e2eaa40
0x6e2eaa42
0x6e2eaa44
0x6e2eaa46
0x6e2eaa48
0x6e2eaa4a
0x6e2eaa4c
0x6e2eaa4e
0x6e2eaa50
0x6e2eaa52
0x6e2eaa54
0x6e2eaa56
0x6e2eaa58
0x6e2eaa5a
0x6e2eaa5c
0x6e2eaa5e
0x6e2eaa60
0x6e2eaa62
0x6e2eaa64
0x6e2eaa66
0x6e2eaa68
0x6e2eaa6a
0x6e2eaa6c
0x6e2eaa6e
0x6e2eaa70
0x6e2eaa72
0x6e2eaa74
0x6e2eaa76
0x6e2eaa78
0x6e2eaa7a
0x6e2eaa7c
0x6e2eaa7e
0x6e2eaa80
0x6e2eaa82
0x6e2eaa84
0x6e2eaa86
0x6e2eaa88
0x6e2eaa8a
0x6e2eaa8c
0x6e2eaa8e
0x6e2eaa90
0x6e2eaa92
0x6e2eaa94
0x6e2eaa96
0x6e2eaa98
0x6e2eaa9a
0x6e2eaa9c
0x6e2eaa9e
0x6e2eaaa0
0x6e2eaaa2
0x6e2eaaa4
0x6e2eaaa6
0x6e2eaaa8
0x6e2eaaaa
0x6e2eaaac
0x6e2eaaae
0x6e2eaab0
0x6e2eaab2
0x6e2eaab4
0x6e2eaab6
0x6e2eaab8
0x6e2eaaba
0x6e2eaabc
0x6e2eaabe
0x6e2eaac0
0x6e2eaac2
0x6e2eaac4
0x6e2eaac6
0x6e2eaac8
0x6e2eaaca
0x6e2eaacc
0x6e2eaace
0x6e2eaad0
0x6e2eaad2
0x6e2eaad4
0x6e2eaad6
0x6e2eaad8
0x6e2eaada
0x6e2eaadc
0x6e2eaade
0x6e2eaae0
0x6e2eaae2
0x6e2eaae4
0x6e2eaae6
0x6e2eaae8
0x6e2eaaea
0x6e2eaaec
0x6e2eaaee
0x6e2eaaf0
0x6e2eaaf2
0x6e2eaaf4
0x6e2eaaf6
0x6e2eaaf8
0x6e2eaafa
0x6e2eaafc
0x6e2eaafe
0x6e2eab00
0x6e2eab02
0x6e2eab04
0x6e2eab06
0x6e2eab08
0x6e2eab0a
0x6e2eab0c
0x6e2eab0e
0x6e2eab10
0x6e2eab12
0x6e2eab14
0x6e2eab16
0x6e2eab18
0x6e2eab1a
0x6e2eab1c
0x6e2eab1e
0x6e2eab20
0x6e2eab22
0x6e2eab24
0x6e2eab26
0x6e2eab28
0x6e2eab2a
0x6e2eab2c
0x6e2eab2e
0x6e2eab30
0x6e2eab32
0x6e2eab34
0x6e2eab36
0x6e2eab38
0x6e2eab3a
0x6e2eab3c
0x6e2eab3e
0x6e2eab40
0x6e2eab42
0x6e2eab44
0x6e2eab46
0x6e2eab48
0x6e2eab4a
0x6e2eab4c
0x6e2eab4e
0x6e2eab50
0x6e2eab52
0x6e2eab54
0x6e2eab56
0x6e2eab58
0x6e2eab5a
0x6e2eab5c
0x6e2eab5e
0x6e2eab60
0x6e2eab62
0x6e2eab64
0x6e2eab66
0x6e2eab68
0x6e2eab6a
0x6e2eab6c
0x6e2eab6e
0x6e2eab70
0x6e2eab72
0x6e2eab74
0x6e2eab76
0x6e2eab78
0x6e2eab7a
0x6e2eab7c
0x6e2eab7e
0x6e2eab80
0x6e2eab82
0x6e2eab84
0x6e2eab86
0x6e2eab88
0x6e2eab8a
0x6e2eab8c
0x6e2eab8e
0x6e2eab90
0x6e2eab92
0x6e2eab94
0x6e2eab96
0x6e2eab98
0x6e2eab9a
0x6e2eab9c
0x6e2eab9e
0x6e2eaba0
0x6e2eaba2
0x6e2eaba4
0x6e2eaba6
0x6e2eaba8
0x6e2eabaa
0x6e2eabac
0x6e2eabae
0x6e2eabb0
0x6e2eabb2
0x6e2eabb4
0x6e2eabb6
0x6e2eabb8
0x6e2eabba
0x6e2eabbc
0x6e2eabbe
0x6e2eabc0
0x6e2eabc2
0x6e2eabc4
0x6e2eabc6
0x6e2eabc8
0x6e2eabca
0x6e2eabcc
0x6e2eabce
0x6e2eabd0
0x6e2eabd2
0x6e2eabd4
0x6e2eabd6
0x6e2eabd8
0x6e2eabda
0x6e2eabdc
0x6e2eabde
0x6e2eabe0
0x6e2eabe2
0x6e2eabe4
0x6e2eabe6
0x6e2eabe8
0x6e2eabea
0x6e2eabec
0x6e2eabee
0x6e2eabf0
0x6e2eabf2
0x6e2eabf4
0x6e2eabf6
0x6e2eabf8
0x6e2eabfa
0x6e2eabfc
0x6e2eabfe
0x6e2eac00
0x6e2eac02
0x6e2eac04
0x6e2eac06
0x6e2eac08
0x6e2eac0a
0x6e2eac0c
0x6e2eac0e
0x6e2eac10
0x6e2eac12
0x6e2eac14
0x6e2eac16
0x6e2eac18
0x6e2eac1a
0x6e2eac1c
0x6e2eac1e
0x6e2eac20
0x6e2eac22
0x6e2eac24
0x6e2eac26
0x6e2eac28
0x6e2eac2a
0x6e2eac2c
0x6e2eac2e
0x6e2eac30
0x6e2eac32
0x6e2eac34
0x6e2eac36
0x6e2eac38
0x6e2eac3a
0x6e2eac3c
0x6e2eac3e
0x6e2eac40
0x6e2eac42
0x6e2eac44
0x6e2eac46
0x6e2eac48
0x6e2eac4a
0x6e2eac4c
0x6e2eac4e
0x6e2eac50
0x6e2eac52
0x6e2eac54
0x6e2eac56
0x6e2eac58
0x6e2eac5a
0x6e2eac5c
0x6e2eac5e
0x6e2eac60
0x6e2eac62
0x6e2eac64
0x6e2eac66
0x6e2eac68
0x6e2eac6a
0x6e2eac6c
0x6e2eac6e
0x6e2eac70
0x6e2eac72
0x6e2eac74
0x6e2eac76
0x6e2eac78
0x6e2eac7a
0x6e2eac7c
0x6e2eac7e
0x6e2eac80
0x6e2eac82
0x6e2eac84
0x6e2eac86
0x6e2eac88
0x6e2eac8a
0x6e2eac8c
0x6e2eac8e
0x6e2eac90
0x6e2eac92
0x6e2eac94
0x6e2eac96
0x6e2eac98
0x6e2eac9a
0x6e2eac9c
0x6e2eac9e
0x6e2eaca0
0x6e2eaca2
0x6e2eaca4
0x6e2eaca6
0x6e2eaca8
0x6e2eacaa
0x6e2eacac
0x6e2eacae
0x6e2eacb0
0x6e2eacb2
0x6e2eacb4
0x6e2eacb6
0x6e2eacb8
0x6e2eacba
0x6e2eacbc
0x6e2eacbe
0x6e2eacc0
0x6e2eacc2
0x6e2eacc4
0x6e2eacc6
0x6e2eacc8
0x6e2eacca
0x6e2eaccc
0x6e2eacce
0x6e2eacd0
0x6e2eacd2
0x6e2eacd4
0x6e2eacd6
0x6e2eacd8
0x6e2eacda
0x6e2eacdc
0x6e2eacde
0x6e2eace0
0x6e2eace2
0x6e2eace4
0x6e2eace6
0x6e2eace8
0x6e2eacea
0x6e2eacec
0x6e2eacee
0x6e2eacf0
0x6e2eacf2
0x6e2eacf4
0x6e2eacf6
0x6e2eacf8
0x6e2eacfa
0x6e2eacfc
0x6e2eacfe
0x6e2ead00
0x6e2ead02
0x6e2ead04
0x6e2ead06
0x6e2ead08
0x6e2ead0a
0x6e2ead0c
0x6e2ead0e
0x6e2ead10
0x6e2ead12
0x6e2ead14
0x6e2ead16
0x6e2ead18
0x6e2ead1a
0x6e2ead1c
0x6e2ead1e
0x6e2ead20
0x6e2ead22
0x6e2ead24
0x6e2ead26
0x6e2ead28
0x6e2ead2a
0x6e2ead2c
0x6e2ead2e
0x6e2ead30
0x6e2ead32
0x6e2ead34
0x6e2ead36
0x6e2ead38
0x6e2ead3a
0x6e2ead3c
0x6e2ead3e
0x6e2ead40
0x6e2ead42
0x6e2ead44
0x6e2ead46
0x6e2ead48
0x6e2ead4a
0x6e2ead4c
0x6e2ead4e
0x6e2ead50
0x6e2ead52
0x6e2ead54
0x6e2ead56
0x6e2ead58
0x6e2ead5a
0x6e2ead5c
0x6e2ead5e
0x6e2ead60
0x6e2ead62
0x6e2ead64
0x6e2ead66
0x6e2ead68
0x6e2ead6a
0x6e2ead6c
0x6e2ead6e
0x6e2ead70
0x6e2ead72
0x6e2ead74
0x6e2ead76
0x6e2ead78
0x6e2ead7a
0x6e2ead7c
0x6e2ead7e
0x6e2ead80
0x6e2ead82
0x6e2ead84
0x6e2ead86
0x6e2ead88
0x6e2ead8a
0x6e2ead8c
0x6e2ead8e
0x6e2ead90
0x6e2ead92
0x6e2ead94
0x6e2ead96
0x6e2ead98
0x6e2ead9a
0x6e2ead9c
0x6e2ead9e
0x6e2eada0
0x6e2eada2
0x6e2eada4
0x6e2eada6
0x6e2eada8
0x6e2eadaa
0x6e2eadac
0x6e2eadae
0x6e2eadb0
0x6e2eadb2
0x6e2eadb4
0x6e2eadb6
0x6e2eadb8
0x6e2eadba
0x6e2eadbc
0x6e2eadbe
0x6e2eadc0
0x6e2eadc2
0x6e2eadc4
0x6e2eadc6
0x6e2eadc8
0x6e2eadca
0x6e2eadcc
0x6e2eadce
0x6e2eadd0
0x6e2eadd2
0x6e2eadd4
0x6e2eadd6
0x6e2eadd8
0x6e2eadda
0x6e2eaddc
0x6e2eadde
0x6e2eade0
0x6e2eade2
0x6e2eade4
0x6e2eade6
0x6e2eade8
0x6e2eadea
0x6e2eadec
0x6e2eadee
0x6e2eadf0
0x6e2eadf2
0x6e2eadf4
0x6e2eadf6
0x6e2eadf8
0x6e2eadfa
0x6e2eadfc
0x6e2eadfe
0x6e2eae00
0x6e2eae02
0x6e2eae04
0x6e2eae06
0x6e2eae08
0x6e2eae0a
0x6e2eae0c
0x6e2eae0e
0x6e2eae10
0x6e2eae12
0x6e2eae14
0x6e2eae16
0x6e2eae18
0x6e2eae1a
0x6e2eae1c
0x6e2eae1e
0x6e2eae20
0x6e2eae22
0x6e2eae24
0x6e2eae26
0x6e2eae28
0x6e2eae2a
0x6e2eae2c
0x6e2eae2e
0x6e2eae30
0x6e2eae32
0x6e2eae34
0x6e2eae36
0x6e2eae38
0x6e2eae3a
0x6e2eae3c
0x6e2eae3e
0x6e2eae40
0x6e2eae42
0x6e2eae44
0x6e2eae46
0x6e2eae48
0x6e2eae4a
0x6e2eae4c
0x6e2eae4e
0x6e2eae50
0x6e2eae52
0x6e2eae54
0x6e2eae56
0x6e2eae58
0x6e2eae5a
0x6e2eae5c
0x6e2eae5e
0x6e2eae60
0x6e2eae62
0x6e2eae64
0x6e2eae66
0x6e2eae68
0x6e2eae6a
0x6e2eae6c
0x6e2eae6e
0x6e2eae70
0x6e2eae72
0x6e2eae74
0x6e2eae76
0x6e2eae78
0x6e2eae7a
0x6e2eae7c
0x6e2eae7e
0x6e2eae80
0x6e2eae82
0x6e2eae84
0x6e2eae86
0x6e2eae88
0x6e2eae8a
0x6e2eae8c
0x6e2eae8e
0x6e2eae90
0x6e2eae92
0x6e2eae94
0x6e2eae96
0x6e2eae98
0x6e2eae9a
0x6e2eae9c
0x6e2eae9e
0x6e2eaea0
0x6e2eaea2
0x6e2eaea4
0x6e2eaea6
0x6e2eaea8
0x6e2eaeaa
0x6e2eaeac
0x6e2eaeae
0x6e2eaeb0
0x6e2eaeb2
0x6e2eaeb4
0x6e2eaeb6
0x6e2eaeb8
0x6e2eaeba
0x6e2eaebc
0x6e2eaebe
0x6e2eaec0
0x6e2eaec2
0x6e2eaec4
0x6e2eaec6
0x6e2eaec8
0x6e2eaeca
0x6e2eaecc
0x6e2eaece
0x6e2eaed0
0x6e2eaed2
0x6e2eaed4
0x6e2eaed6
0x6e2eaed8
0x6e2eaeda
0x6e2eaedc
0x6e2eaede
0x6e2eaee0
0x6e2eaee2
0x6e2eaee4
0x6e2eaee6
0x6e2eaee8
0x6e2eaeea
0x6e2eaeec
0x6e2eaeee
0x6e2eaef0
0x6e2eaef2
0x6e2eaef4
0x6e2eaef6
0x6e2eaef8
0x6e2eaefa
0x6e2eaefc
0x6e2eaefe
0x6e2eaf00
0x6e2eaf02
0x6e2eaf04
0x6e2eaf06
0x6e2eaf08
0x6e2eaf0a
0x6e2eaf0c
0x6e2eaf0e
0x6e2eaf10
0x6e2eaf12
0x6e2eaf14
0x6e2eaf16
0x6e2eaf18
0x6e2eaf1a
0x6e2eaf1c
0x6e2eaf1e
0x6e2eaf20
0x6e2eaf22
0x6e2eaf24
0x6e2eaf26
0x6e2eaf28
0x6e2eaf2a
0x6e2eaf2c
0x6e2eaf2e
0x6e2eaf30
0x6e2eaf32
0x6e2eaf34
0x6e2eaf36
0x6e2eaf38
0x6e2eaf3a
0x6e2eaf3c
0x6e2eaf3e
0x6e2eaf40
0x6e2eaf42
0x6e2eaf44
0x6e2eaf46
0x6e2eaf48
0x6e2eaf4a
0x6e2eaf4c
0x6e2eaf4e
0x6e2eaf50
0x6e2eaf52
0x6e2eaf54
0x6e2eaf56
0x6e2eaf58
0x6e2eaf5a
0x6e2eaf5c
0x6e2eaf5e
0x6e2eaf60
0x6e2eaf62
0x6e2eaf64
0x6e2eaf66
0x6e2eaf68
0x6e2eaf6a
0x6e2eaf6c
0x6e2eaf6e
0x6e2eaf70
0x6e2eaf72
0x6e2eaf74
0x6e2eaf76
0x6e2eaf78
0x6e2eaf7a
0x6e2eaf7c
0x6e2eaf7e
0x6e2eaf80
0x6e2eaf82
0x6e2eaf84
0x6e2eaf86
0x6e2eaf88
0x6e2eaf8a
0x6e2eaf8c
0x6e2eaf8e
0x6e2eaf90
0x6e2eaf92
0x6e2eaf94
0x6e2eaf96
0x6e2eaf98
0x6e2eaf9a
0x6e2eaf9c
0x6e2eaf9e
0x6e2eafa0
0x6e2eafa2
0x6e2eafa4
0x6e2eafa6
0x6e2eafa8
0x6e2eafaa
0x6e2eafac
0x6e2eafae
0x6e2eafb0
0x6e2eafb2
0x6e2eafb4
0x6e2eafb6
0x6e2eafb8
0x6e2eafba
0x6e2eafbc
0x6e2eafbe
0x6e2eafc0
0x6e2eafc2
0x6e2eafc4
0x6e2eafc6
0x6e2eafc8
0x6e2eafca
0x6e2eafcc
0x6e2eafce
0x6e2eafd0
0x6e2eafd2
0x6e2eafd4
0x6e2eafd6
0x6e2eafd8
0x6e2eafda
0x6e2eafdc
0x6e2eafde
0x6e2eafe0
0x6e2eafe2
0x6e2eafe4
0x6e2eafe6
0x6e2eafe8
0x6e2eafea
0x6e2eafec
0x6e2eafee
0x6e2eaff0
0x6e2eaff2
0x6e2eaff4
0x6e2eaff6
0x6e2eaff8
0x6e2eaffa
0x6e2eaffc
0x6e2eaffe
0x6e2eaffe
0x6e2eb000
0x6e2eb001
0x6e2eb064
0x6e2eb064
0x6e2eb067
0x00000000
0x00000000
0x00000000
0x00000000
0x6e2eb003
0x6e2eb003
0x6e2eb034
0x6e2eb034
0x6e2eb035
0x00000000
0x6e2eb037
0x6e2eb037
0x00000000
0x6e2eb037
0x6e2eb005
0x6e2eb005
0x6e2eb074
0x6e2eb074
0x00000000
0x6e2eb007
0x6e2eb007
0x6e2eb038
0x6e2eb038
0x6e2eb069
0x6e2eb069
0x00000000
0x6e2eb06c
0x6e2eb06c
0x6e2eb071
0x6e2eb071
0x00000000
0x6e2eb071
0x6e2eb03a
0x6e2eb03a
0x6e2eb0a5
0x6e2eb0c7
0x6e2eb0c7
0x00000000
0x6e2eb0a7
0x6e2eb0a7
0x6e2eb0aa
0x6e2eb0ac
0x6e2eb0ac
0x6e2eb0ad
0x00000000
0x6e2eb0af
0x6e2eb0af
0x00000000
0x6e2eb0b2
0x6e2eb0b2
0x6e2eb0b2
0x00000000
0x6e2eb0b2
0x6e2eb0af
0x6e2eb0ad
0x6e2eb03c
0x6e2eb03c
0x6e2eb03d
0x6e2eb0b3
0x6e2eb0b3
0x6e2eb0b4
0x00000000
0x6e2eb03f
0x6e2eb03f
0x6e2eb044
0x6e2eb075
0x6e2eb075
0x6e2eb07a
0x6e2eb07b
0x6e2eb07c
0x6e2eb07d
0x6e2eb07d
0x6e2eb07e
0x6e2eb07f
0x00000000
0x6e2eb046
0x6e2eb046
0x6e2eb0ba
0x6e2eb0ba
0x6e2eb0be
0x6e2eb0be
0x6e2eb048
0x6e2eb048
0x6e2eb04a
0x6e2eb04d
0x6e2eb0b8
0x6e2eb0b8
0x6e2eb0b8
0x00000000
0x6e2eb04f
0x6e2eb04f
0x6e2eb080
0x6e2eb080
0x6e2eb081
0x6e2eb082
0x6e2eb083
0x6e2eb085
0x6e2eb089
0x6e2eb089
0x6e2eb08b
0x6e2eb08e
0x00000000
0x6e2eb090
0x6e2eb090
0x00000000
0x6e2eb093
0x6e2eb093
0x6e2eb0b5
0x6e2eb0b5
0x6e2eb0b5
0x6e2eb0b5
0x00000000
0x6e2eb095
0x6e2eb095
0x6e2eb095
0x6e2eb097
0x6e2eb097
0x6e2eb09a
0x00000000
0x6e2eb09c
0x6e2eb09c
0x6e2eb09c
0x6e2eb0a0
0x6e2eb0a0
0x6e2eb0a0
0x6e2eb0a0
0x6e2eb09a
0x6e2eb093
0x6e2eb090
0x6e2eb052
0x6e2eb052
0x6e2eb054
0x6e2eb056
0x6e2eb056
0x6e2eb056
0x6e2eb059
0x6e2eb0cd
0x6e2eb0cd
0x6e2eb0ce
0x6e2eb0ce
0x6e2eb0d2
0x6e2eb0d2
0x6e2eb0d7
0x6e2eb0d7
0x6e2eb0d7
0x6e2eb0da
0x6e2eb0fc
0x6e2eb0fc
0x6e2eb0fd
0x00000000
0x6e2eb0ff
0x6e2eb0ff
0x00000000
0x6e2eb101
0x6e2eb101
0x00000000
0x00000000
0x00000000
0x00000000
0x6e2eb101
0x6e2eb0ff
0x6e2eb0dc
0x6e2eb0e3
0x6e2eb0e4
0x6e2eb0e9
0x6e2eb0e9
0x6e2eb0e9
0x6e2eb0eb
0x6e2eb0f0
0x6e2eb12f
0x6e2eb12f
0x6e2eb130
0x6e2eb130
0x6e2eb0f2
0x6e2eb0f2
0x6e2eb0f2
0x6e2eb0f2
0x6e2eb0f7
0x6e2eb103
0x6e2eb103
0x6e2eb134
0x00000000
0x6e2eb136
0x6e2eb136
0x00000000
0x6e2eb138
0x6e2eb138
0x6e2eb139
0x00000000
0x6e2eb13b
0x6e2eb13b
0x6e2eb140
0x00000000
0x6e2eb142
0x6e2eb142
0x6e2eb1b6
0x6e2eb1b6
0x00000000
0x6e2eb144
0x6e2eb144
0x6e2eb146
0x00000000
0x6e2eb148
0x6e2eb148
0x00000000
0x6e2eb148
0x6e2eb146
0x6e2eb142
0x6e2eb140
0x6e2eb139
0x6e2eb136
0x6e2eb105
0x6e2eb105
0x6e2eb108
0x6e2eb109
0x6e2eb10b
0x6e2eb10c
0x6e2eb10c
0x6e2eb10e
0x6e2eb10e
0x6e2eb111
0x6e2eb149
0x6e2eb149
0x6e2eb14a
0x6e2eb14d
0x6e2eb14f
0x6e2eb151
0x6e2eb151
0x6e2eb153
0x00000000
0x00000000
0x00000000
0x00000000
0x6e2eb113
0x6e2eb113
0x6e2eb115
0x6e2eb115
0x6e2eb115
0x6e2eb11b
0x6e2eb120
0x6e2eb122
0x6e2eb122
0x6e2eb123
0x6e2eb123
0x6e2eb126
0x6e2eb126
0x6e2eb155
0x6e2eb155
0x6e2eb156
0x6e2eb157
0x6e2eb15a
0x00000000
0x6e2eb15c
0x6e2eb15c
0x6e2eb15e
0x6e2eb15e
0x00000000
0x6e2eb15e
0x6e2eb128
0x6e2eb128
0x6e2eb160
0x6e2eb160
0x6e2eb1ce
0x6e2eb1ce
0x6e2eb1d7
0x6e2eb1da
0x6e2eb1db
0x6e2eb1db
0x6e2eb1df
0x6e2eb1e3
0x6e2eb1ed
0x6e2eb1ed
0x6e2eb1f0
0x6e2eb1f0
0x6e2eb162
0x6e2eb162
0x6e2eb162
0x6e2eb165
0x6e2eb165
0x6e2eb1c8
0x6e2eb1c8
0x6e2eb1c8
0x6e2eb1ca
0x6e2eb1cb
0x6e2eb1cc
0x6e2eb1cc
0x6e2eb1cd
0x6e2eb1cd
0x00000000
0x6e2eb167
0x6e2eb167
0x6e2eb168
0x6e2eb168
0x6e2eb170
0x6e2eb170
0x6e2eb170
0x6e2eb171
0x6e2eb171
0x6e2eb172
0x6e2eb173
0x6e2eb174
0x6e2eb175
0x6e2eb176
0x6e2eb178
0x6e2eb179
0x6e2eb17b
0x6e2eb17b
0x6e2eb17c
0x6e2eb17c
0x6e2eb17f
0x6e2eb17f
0x6e2eb181
0x6e2eb1ff
0x6e2eb1ff
0x6e2eb183
0x6e2eb183
0x6e2eb184
0x6e2eb185
0x6e2eb188
0x6e2eb1aa
0x6e2eb1aa
0x6e2eb1ac
0x6e2eb1ac
0x6e2eb1af
0x6e2eb1af
0x6e2eb1b2
0x6e2eb1b2
0x6e2eb18a
0x6e2eb18a
0x6e2eb18c
0x6e2eb18f
0x6e2eb190
0x6e2eb190
0x6e2eb192
0x6e2eb196
0x6e2eb1b8
0x6e2eb1b8
0x6e2eb1bf
0x6e2eb1bf
0x6e2eb1c1
0x6e2eb1c2
0x6e2eb1c2
0x00000000
0x6e2eb198
0x6e2eb198
0x6e2eb19b
0x6e2eb19b
0x6e2eb19c
0x6e2eb19e
0x6e2eb1a0
0x6e2eb1a0
0x6e2eb1a1
0x6e2eb1a1
0x6e2eb216
0x6e2eb219
0x00000000
0x6e2eb1a3
0x6e2eb1a3
0x6e2eb1a4
0x6e2eb21a
0x6e2eb21a
0x6e2eb221
0x6e2eb227
0x6e2eb227
0x6e2eb227
0x6e2eb22a
0x6e2eb22b
0x6e2eb1a6
0x6e2eb1a6
0x6e2eb1a6
0x00000000
0x6e2eb1a6
0x6e2eb1a4
0x6e2eb1a1
0x6e2eb196
0x6e2eb188
0x6e2eb181
0x6e2eb165
0x6e2eb12a
0x6e2eb12a
0x6e2eb12c
0x6e2eb12d
0x6e2eb12d
0x00000000
0x6e2eb12d
0x6e2eb128
0x6e2eb126
0x6e2eb111
0x6e2eb0f9
0x6e2eb0f9
0x6e2eb0f9
0x6e2eb0fb
0x6e2eb0fb
0x00000000
0x6e2eb0fb
0x6e2eb0f7
0x6e2eb0f0
0x6e2eb05b
0x6e2eb05b
0x6e2eb062
0x6e2eb062
0x00000000
0x6e2eb062
0x6e2eb059
0x6e2eb04f
0x6e2eb04d
0x6e2eb046
0x6e2eb044
0x6e2eb03d
0x6e2eb03a
0x6e2eb009
0x6e2eb009
0x6e2eb00c
0x6e2eb00d
0x6e2eb00f
0x6e2eb017
0x6e2eb019
0x6e2eb024
0x6e2eb026
0x6e2eb027
0x6e2eb02e
0x6e2eb030
0x6e2eb031
0x6e2eb031
0x00000000
0x6e2eb031
0x6e2eb007
0x6e2eb005
0x6e2eb003
0x6e2eb2b2
0x6e2eb2b2
0x6e2e4bcb
0x6e2e4bce
0x6e2e4bd1
0x6e2e4bd7
0x6e2e4bde
0x6e2e4be5
0x6e2e4bee
0x6e2e4bf6
0x6e2e4bfa
0x6e2e4bfd
0x6e2e4c03
0x6e2e4c06
0x6e2e4c08
0x00000000
0x6e2e4c0e
0x6e2e4c19
0x6e2e4c19
0x6e2e4c08
0x6e2e4bc5
0x6e2e4b22
0x6e2e4afc
0x6e2e4afc
0x6e2e4b05
0x6e2e4b05
0x6e2e4a39
0x6e2e4a39
0x6e2e4a45
0x6e2e4a45
0x6e2e4a37

APIs

pthread_spin_destroy.LIBWINPTHREAD-1 ref: 6E2E4A2F
GetCurrentThreadId.KERNEL32 ref: 6E2E4A70
_ultoa.MSVCRT ref: 6E2E4A89
OutputDebugStringA.KERNEL32 ref: 6E2E4AC0
abort.MSVCRT(00000000), ref: 6E2E4AC7
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6E2E5ADA,?,?,?,?,6E2E6ADD), ref: 6E2E4AED

Strings

Error cleaning up spin_keys for thread , xrefs: 6E2E4A57, 6E2E4AD2

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CurrentDebugOutputStringThreadValue_ultoaabortpthread_spin_destroy
String ID: Error cleaning up spin_keys for thread
API String ID: 3968433069-2906507043
Opcode ID: 3eea0c534946b32c9dff046a029a1156e6aa92e115179d0c527629b0302d28b2
Instruction ID: 452bd08a97e71715fdc994cf3ef957de8fd3cd8e1b2c7db17441975f99f867bd
Opcode Fuzzy Hash: 3eea0c534946b32c9dff046a029a1156e6aa92e115179d0c527629b0302d28b2
Instruction Fuzzy Hash: 552129719087269BEB005BF8E8A875B7BE6EB86325F800E29E0A4D7780D734C445C762

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E77B0 Relevance: 12.1, APIs: 8, Instructions: 138timethreadCOMMON

Download Yara Rule

APIs

QueryPerformanceFrequency.KERNEL32 ref: 6E2E77E6
QueryPerformanceCounter.KERNEL32 ref: 6E2E77FE
GetCurrentThread.KERNEL32 ref: 6E2E78B9
GetThreadTimes.KERNEL32 ref: 6E2E78E2
GetCurrentProcess.KERNEL32 ref: 6E2E7950
GetProcessTimes.KERNEL32 ref: 6E2E7979
_errno.MSVCRT ref: 6E2E798A
GetSystemTimeAsFileTime.KERNEL32 ref: 6E2E79AF

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CurrentPerformanceProcessQueryThreadTimeTimes$CounterFileFrequencySystem_errno
String ID:
API String ID: 3786581644-0
Opcode ID: 8d389a7078c1a191721c35fed7474443ab5c63a11a5607eefddc951e0735c324
Instruction ID: 664a25e72f9ba141b73e8b0f8eeac39a31dccccd9df9ea146373e5bbe182f849
Opcode Fuzzy Hash: 8d389a7078c1a191721c35fed7474443ab5c63a11a5607eefddc951e0735c324
Instruction Fuzzy Hash: 9C512FB69083158FDB00DF69C58425ABBF6BFC9354F45C92EE8998B214E335D944CF82

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E40A0 Relevance: 12.1, APIs: 8, Instructions: 133COMMON

Download Yara Rule

APIs

Part of subcall function 6E2E3AC0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,6E2E3C32), ref: 6E2E3AD8
Part of subcall function 6E2E3AC0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,6E2E3C32), ref: 6E2E3AEA

pthread_mutex_timedlock.LIBWINPTHREAD-1 ref: 6E2E40E0
pthread_mutex_timedlock.LIBWINPTHREAD-1 ref: 6E2E40F7

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_timedlock$pthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 2118215603-0
Opcode ID: 5b983a4fc86b0e60500d1047ad4ec66571ddcaac8325ce84eac1951e84b67d1c
Instruction ID: c88b9bea035da37990b643d97b7a63c5ba4822fa8bb86914d6a095f6bed48748
Opcode Fuzzy Hash: 5b983a4fc86b0e60500d1047ad4ec66571ddcaac8325ce84eac1951e84b67d1c
Instruction Fuzzy Hash: B7415074A0831A8FD714DFA5D48065BFBE6BF94355F404D2DE88987B20D730E94A8F82

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E29C6 Relevance: 12.1, APIs: 8, Instructions: 101COMMON

Download Yara Rule

APIs

_pthread_rel_time_in_ms.LIBWINPTHREAD-1 ref: 6E2E2A16

Part of subcall function 6E2E2D00: GetSystemTimeAsFileTime.KERNEL32 ref: 6E2E2D49

RtlEnterCriticalSection.NTDLL ref: 6E2E2A36
RtlLeaveCriticalSection.NTDLL ref: 6E2E2A46
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E2A6F
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E2A7F
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E2A92
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E2A9F
_pthread_time_in_ms_from_timespec.LIBWINPTHREAD-1 ref: 6E2E2AC8

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_getclean$CriticalSectionTime$EnterFileLeaveSystem_pthread_rel_time_in_ms_pthread_time_in_ms_from_timespecpthread_mutex_unlock
String ID:
API String ID: 3334244777-0
Opcode ID: f5aad7b093bd23b6cb7edde722b35fd4656f25d10746ba7eecd7a407553b989e
Instruction ID: 95a313148de8ee4d4f8b71749658679191976f5eb15d76929cc7fc01a2fbd947
Opcode Fuzzy Hash: f5aad7b093bd23b6cb7edde722b35fd4656f25d10746ba7eecd7a407553b989e
Instruction Fuzzy Hash: D2416EB550872A8FD710DFA9C48061BB7E6BF88354F804E6DE896DB750D770D940CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4C60 Relevance: 12.1, APIs: 8, Instructions: 72COMMON

Download Yara Rule

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1(?,?,?,?,?,?,00000000,?,?,?,6E2E58D2,?,?,?,0000001C,6E2E5A6F), ref: 6E2E4C6A

Part of subcall function 6E2E4C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C36
Part of subcall function 6E2E4C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C4B

pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E4C8B
pthread_rwlock_rdlock.LIBWINPTHREAD-1 ref: 6E2E4CCE
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E4CF2
pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E4D05
pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6E2E4D1C
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E4D29
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E4D53

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_spin_unlock$pthread_spin_lock$__pth_gpointer_lockedpthread_mutex_lockpthread_mutex_unlockpthread_rwlock_rdlockpthread_rwlock_unlock
String ID:
API String ID: 4251901166-0
Opcode ID: ab163bbda2b3631c05ef095c7cd4ff2965558b3bf8d989f5bf5cef8a5057cfaf
Instruction ID: a5f52201d57936c6b0ff710bcc28f0411529bb2d308502fd1c4fb69e3c20b469
Opcode Fuzzy Hash: ab163bbda2b3631c05ef095c7cd4ff2965558b3bf8d989f5bf5cef8a5057cfaf
Instruction Fuzzy Hash: B921AB7490462E8FC710AFA5D885A6ABBE6FF40304F82181DD4844BF11DB35E486CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4B06 Relevance: 12.1, APIs: 8, Instructions: 67threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6E2E48D0: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4B15,?,?,?,?,?,?,?,?,?,?,?), ref: 6E2E48DC
Part of subcall function 6E2E48D0: pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E491C

GetCurrentThreadId.KERNEL32 ref: 6E2E4B2B
CreateEventA.KERNEL32 ref: 6E2E4B53

Part of subcall function 6E2E4A20: pthread_spin_destroy.LIBWINPTHREAD-1 ref: 6E2E4A2F

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6E2E5ADA), ref: 6E2E4B82
GetCurrentThread.KERNEL32 ref: 6E2E4B86
GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6E2E5ADA), ref: 6E2E4B8E
DuplicateHandle.KERNEL32 ref: 6E2E4BBA
GetThreadPriority.KERNEL32 ref: 6E2E4BD1
TlsSetValue.KERNEL32 ref: 6E2E4BFD
abort.MSVCRT(?,?,6E2E49BC,?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E95C5

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Current$Thread$Process$CreateDuplicateEventHandlePriorityValueabortpthread_mutex_lockpthread_mutex_unlockpthread_spin_destroy
String ID:
API String ID: 3052336117-0
Opcode ID: 3845d4a85575dd676c7540a946b04824f65834920888d35c97b9b1608156d9b3
Instruction ID: b30f0cf65972177214d4c93086502a1f949f595c3bdd9030fd3036fdfa55af04
Opcode Fuzzy Hash: 3845d4a85575dd676c7540a946b04824f65834920888d35c97b9b1608156d9b3
Instruction Fuzzy Hash: 70312AB1804B158FE7109FA9D54831BBBF1BF45315F004A1DD89987741D7B4E508CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5DF7 Relevance: 12.1, APIs: 8, Instructions: 53threadinjectionsynchronizationCOMMON

Download Yara Rule

APIs

pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E5D4E
SuspendThread.KERNEL32 ref: 6E2E5E0E
WaitForSingleObject.KERNEL32 ref: 6E2E5E25
GetThreadContext.KERNEL32 ref: 6E2E5E43
SetThreadContext.KERNEL32 ref: 6E2E5E61
SetEvent.KERNEL32 ref: 6E2E5E8D
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E5E99
ResumeThread.KERNEL32 ref: 6E2E5EA4

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Thread$Contextpthread_mutex_unlock$EventObjectResumeSingleSuspendWait
String ID:
API String ID: 548557552-0
Opcode ID: e191149ef0889971b7bbf3ef53e1450c62f10c7972d1bf2b1bd7d7d026f1a8ab
Instruction ID: a66bb6a96fa400845fda7be0f52786d94553c7ead38e1e11cca5d5c18683a16e
Opcode Fuzzy Hash: e191149ef0889971b7bbf3ef53e1450c62f10c7972d1bf2b1bd7d7d026f1a8ab
Instruction Fuzzy Hash: D7114CB59147108FDB00AFB8E68D25BBFF1BF41311F110A6DD8958B249D734D898CB62

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E2397 Relevance: 12.1, APIs: 8, Instructions: 52COMMON

Download Yara Rule

APIs

RtlTryEnterCriticalSection.NTDLL ref: 6E2E23AA
RtlLeaveCriticalSection.NTDLL ref: 6E2E2462

Part of subcall function 6E2E1A20: RtlEnterCriticalSection.NTDLL ref: 6E2E1A37
Part of subcall function 6E2E1A20: ReleaseSemaphore.KERNEL32 ref: 6E2E1A8E
Part of subcall function 6E2E1A20: RtlLeaveCriticalSection.NTDLL ref: 6E2E1A9E

CloseHandle.KERNEL32 ref: 6E2E23EB
CloseHandle.KERNEL32 ref: 6E2E23F6
RtlLeaveCriticalSection.NTDLL ref: 6E2E2402
RtlDeleteCriticalSection.NTDLL ref: 6E2E2414
RtlDeleteCriticalSection.NTDLL ref: 6E2E241C
RtlDeleteCriticalSection.NTDLL ref: 6E2E2427
??3@YAXPAX@Z.MSVCRT ref: 6E2E242F

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CriticalSection$DeleteLeave$CloseEnterHandle$??3@ReleaseSemaphore
String ID:
API String ID: 2371872607-0
Opcode ID: 48004083acda6179a4780fcf134e05846bed629bbd6ade72e0a9ec933431a766
Instruction ID: 4e6b763fccf34ea13248123cba1796688e6bf21b5804e447f9509b50cb5ccd3c
Opcode Fuzzy Hash: 48004083acda6179a4780fcf134e05846bed629bbd6ade72e0a9ec933431a766
Instruction Fuzzy Hash: 5111F8F55047188FDB00BF78E58921ABBF1AB44200F11087DDC8A8B205EB34E859CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3100 Relevance: 10.6, APIs: 7, Instructions: 140COMMON

Download Yara Rule

APIs

_pthread_time_in_ms_from_timespec.LIBWINPTHREAD-1 ref: 6E2E311B
_pthread_time_in_ms.LIBWINPTHREAD-1 ref: 6E2E3124

Part of subcall function 6E2E2C50: GetSystemTimeAsFileTime.KERNEL32 ref: 6E2E2C5D

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Time$FileSystem_pthread_time_in_ms_pthread_time_in_ms_from_timespec
String ID:
API String ID: 1543282791-0
Opcode ID: 16e00ec2094ac5069a2028467fe78c1af3e86a2678c4b73d35c6fae907bff8dc
Instruction ID: 3eda4bbb354ea14e81c73fa64855794ef4a805284edf155db8d171e894d69686
Opcode Fuzzy Hash: 16e00ec2094ac5069a2028467fe78c1af3e86a2678c4b73d35c6fae907bff8dc
Instruction Fuzzy Hash: 6941827170432ACFDB449FA9D89871AB7E6FB85312F98883DE8588F754DB30C8458B91

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4650 Relevance: 10.6, APIs: 7, Instructions: 107COMMON

Download Yara Rule

APIs

pthread_mutex_lock.LIBWINPTHREAD-1(?,?,?,?,00000000,?,?,?,6E2E5959,?,?,?,?,?,0000001C,6E2E5A6F), ref: 6E2E467F
??3@YAXPAX@Z.MSVCRT ref: 6E2E469C
??3@YAXPAX@Z.MSVCRT ref: 6E2E46AB
??3@YAXPAX@Z.MSVCRT ref: 6E2E46BA
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,00000000,?,?,?,6E2E5959,?,?,?,?,?,0000001C,6E2E5A6F), ref: 6E2E4702

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ??3@$pthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 4211330938-0
Opcode ID: dadef1b17f7c89c3eac566b89bab28702133a2eca479176e771d4845e0743706
Instruction ID: cdd335f1caca11e00c766bda7c87567a12c4ef66b7e8fc9d23e9e62db5530416
Opcode Fuzzy Hash: dadef1b17f7c89c3eac566b89bab28702133a2eca479176e771d4845e0743706
Instruction Fuzzy Hash: 1D41A07560472A8FDB00DFE9C4947AABBFBFB41305F81496AC944CBA04E7709546CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E2883 Relevance: 10.6, APIs: 7, Instructions: 98COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6E2E28A3
RtlLeaveCriticalSection.NTDLL ref: 6E2E28BC
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E28EA

Part of subcall function 6E2E1A20: RtlEnterCriticalSection.NTDLL ref: 6E2E1A37
Part of subcall function 6E2E1A20: ReleaseSemaphore.KERNEL32 ref: 6E2E1A8E
Part of subcall function 6E2E1A20: RtlLeaveCriticalSection.NTDLL ref: 6E2E1A9E

RtlLeaveCriticalSection.NTDLL ref: 6E2E2913
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E2922

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CriticalSection$Leave$Enterpthread_mutex_lock$ReleaseSemaphore
String ID:
API String ID: 1224211229-0
Opcode ID: 7266b2fa5ec5d619934ff236a903d6080b2b9959844e1fcfcf58152d10017ec2
Instruction ID: d49d5667ae33f671b3a960fcaaa3e451cb7d1d4b492c23e601433750167e104e
Opcode Fuzzy Hash: 7266b2fa5ec5d619934ff236a903d6080b2b9959844e1fcfcf58152d10017ec2
Instruction Fuzzy Hash: 334166B550471E8FDB00EFA9C08462ABBE6FF85314F50492CDCA68B745E770E885CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E6EF0 Relevance: 10.6, APIs: 7, Instructions: 92COMMON

Download Yara Rule

APIs

_pthread_rel_time_in_ms.LIBWINPTHREAD-1 ref: 6E2E6F12

Part of subcall function 6E2E2D00: GetSystemTimeAsFileTime.KERNEL32 ref: 6E2E2D49

Part of subcall function 6E2E6A90: pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E6AB3

pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E6F5E
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6F88
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6F98
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6FCE
_errno.MSVCRT ref: 6E2E7001
sem_wait.LIBWINPTHREAD-1 ref: 6E2E701B

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_getclean$Time$FileSystem_errno_pthread_rel_time_in_mspthread_mutex_lockpthread_mutex_unlocksem_wait
String ID:
API String ID: 3124810977-0
Opcode ID: a242721fcfff06755f835e31a956cec68e615bc7e23284ccb6fb169924760bd6
Instruction ID: 99d1a90d148ce21d1b07d0e9a8b1d90ef63cd4c0d05eb8caffce308931d50d10
Opcode Fuzzy Hash: a242721fcfff06755f835e31a956cec68e615bc7e23284ccb6fb169924760bd6
Instruction Fuzzy Hash: B4318FB5A193198FD340DF69C48464EBBE5EF88368F814A2DF999D7750D730D940CB82

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E58B0 Relevance: 10.6, APIs: 7, Instructions: 63COMMON

Download Yara Rule

APIs

Part of subcall function 6E2E4AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6E2E5ADA,?,?,?,?,6E2E6ADD), ref: 6E2E4AED

_longjmpex.MSVCRT ref: 6E2E58E6
TlsGetValue.KERNEL32(?,?,?,0000001C,6E2E5A6F,?,?,?,?,00000000,6E2E5B55,?,?,?,?,6E2E6ADD), ref: 6E2E58F4
CloseHandle.KERNEL32(?,?,?,?,0000001C,6E2E5A6F,?,?,?,?,00000000,6E2E5B55,?,?,?,?), ref: 6E2E591B
_endthreadex.MSVCRT(?,?,?,?,0000001C,6E2E5A6F,?,?,?,?,00000000,6E2E5B55,?,?,?,?), ref: 6E2E5932
CloseHandle.KERNEL32(?,?,?,?,0000001C,6E2E5A6F,?,?,?,?,00000000,6E2E5B55,?,?,?,?), ref: 6E2E5944
TlsSetValue.KERNEL32 ref: 6E2E5969
CloseHandle.KERNEL32(?,?,?,?,0000001C,6E2E5A6F,?,?,?,?,00000000,6E2E5B55,?,?,?,?), ref: 6E2E5980

Part of subcall function 6E2E4C60: __pth_gpointer_locked.LIBWINPTHREAD-1(?,?,?,?,?,?,00000000,?,?,?,6E2E58D2,?,?,?,0000001C,6E2E5A6F), ref: 6E2E4C6A
Part of subcall function 6E2E4C60: pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E4C8B
Part of subcall function 6E2E4C60: pthread_rwlock_rdlock.LIBWINPTHREAD-1 ref: 6E2E4CCE
Part of subcall function 6E2E4C60: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E4CF2
Part of subcall function 6E2E4C60: pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E4D05
Part of subcall function 6E2E4C60: pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6E2E4D1C
Part of subcall function 6E2E4C60: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E4D29

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CloseHandleValue$pthread_spin_lockpthread_spin_unlock$__pth_gpointer_locked_endthreadex_longjmpexpthread_rwlock_rdlockpthread_rwlock_unlock
String ID:
API String ID: 1570456468-0
Opcode ID: ae9ec0b71c44c2a551dd8277164f5b0029bfdb73f79c95b5f473b8e92fe0d890
Instruction ID: e6a4e7e37e9add99603ac7b67e230a2e864a0e36e41e1a2db58c79ea23ff0de3
Opcode Fuzzy Hash: ae9ec0b71c44c2a551dd8277164f5b0029bfdb73f79c95b5f473b8e92fe0d890
Instruction Fuzzy Hash: D02139B451872A8FEF00AFA4D58C75A7BFABF09315F414898E9858B246E774D840CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E2AC1 Relevance: 10.6, APIs: 7, Instructions: 51COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6E2E2A36
RtlLeaveCriticalSection.NTDLL ref: 6E2E2A46
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E2A6F
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E2A7F
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E2A92
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E2A9F
_pthread_time_in_ms_from_timespec.LIBWINPTHREAD-1 ref: 6E2E2AC8

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_getclean$CriticalSection$EnterLeave_pthread_time_in_ms_from_timespecpthread_mutex_unlock
String ID:
API String ID: 222663773-0
Opcode ID: 4982865ab585ecd9fc63dcb5936fb41e3bf3a37f4bde42a1b771b8d07dbc9abb
Instruction ID: 133b035f4c93be9dda39e051ae2ab0c67d48496c79c50f978388d2c484eee6ed
Opcode Fuzzy Hash: 4982865ab585ecd9fc63dcb5936fb41e3bf3a37f4bde42a1b771b8d07dbc9abb
Instruction Fuzzy Hash: 2D1126B54093188FD340EF69D08424EBBE5AF84364F800A6DE89A9B260D770D944CF92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E47E0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 50COMMON

Download Yara Rule

APIs

pthread_spin_lock.LIBWINPTHREAD-1(?,?,00000000,00000004,6E2E49D9,?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E47EE
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E482E
fprintf.MSVCRT ref: 6E2E488C

Strings

%p not found?!?!, xrefs: 6E2E4881

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: fprintfpthread_spin_lockpthread_spin_unlock
String ID: %p not found?!?!
API String ID: 3343314966-11085004
Opcode ID: 0f6f213da109c01aecd6311f5ad13b2d2eb202c2445ca5fb0c3635cd2dfdfb1b
Instruction ID: 88ece4aebaa49aef3429d67de7bf04087754c7b0de5b5a07e875b71e06e8be0d
Opcode Fuzzy Hash: 0f6f213da109c01aecd6311f5ad13b2d2eb202c2445ca5fb0c3635cd2dfdfb1b
Instruction Fuzzy Hash: 911133B19047BE8FCB40DFF5D884669B7E6BB05215F81486DC9988BA05D734C841CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E1B38 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 49threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6E2E1B59
fprintf.MSVCRT ref: 6E2E1B83
GetCurrentThreadId.KERNEL32 ref: 6E2E1B95
fprintf.MSVCRT ref: 6E2E1BC7

Strings

C%p %d V=%0X w=%ld %s, xrefs: 6E2E1BBC
C%p %d %s, xrefs: 6E2E1B67

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CurrentThreadfprintf
String ID: C%p %d %s$C%p %d V=%0X w=%ld %s
API String ID: 1384477639-884133013
Opcode ID: c91e46ad87dccb2901a21a2bf4f76d09ecc99dc7a4b3f33c30c14a74c9b7c03b
Instruction ID: 71b0834e57f92fb8684c9d69ff92c43d8c526e53caf0bcc0703c985356f168f6
Opcode Fuzzy Hash: c91e46ad87dccb2901a21a2bf4f76d09ecc99dc7a4b3f33c30c14a74c9b7c03b
Instruction Fuzzy Hash: 921128B4A087209FDB50CF59D08465AFBE1FF89650F40882EE89887314D770A845CB62

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E7600 Relevance: 10.5, APIs: 7, Instructions: 48COMMON

Download Yara Rule

APIs

GetCurrentProcessId.KERNEL32 ref: 6E2E7628
OpenProcess.KERNEL32 ref: 6E2E7645
CloseHandle.KERNEL32 ref: 6E2E7655
_errno.MSVCRT ref: 6E2E7673

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Process$CloseCurrentHandleOpen_errno
String ID:
API String ID: 2250453136-0
Opcode ID: 242e9b03d6e21c3be45a2c505a275e3b3925242b44321b9bc6e8cd3fd36c4c38
Instruction ID: 358d97994c70d735e9b44aed4c61bc4be9469e93de8a3479f84a8b972b954341
Opcode Fuzzy Hash: 242e9b03d6e21c3be45a2c505a275e3b3925242b44321b9bc6e8cd3fd36c4c38
Instruction Fuzzy Hash: 591186749087268FEB006FBDD58C60A3BA2AF06319F514624E8A5472D2D7308804CB72

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3870 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 46threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6E2E3889
printf.MSVCRT ref: 6E2E38AA
GetCurrentThreadId.KERNEL32 ref: 6E2E38C5
printf.MSVCRT ref: 6E2E3906

Strings

RWL%p %d V=%0X B=%d r=%ld w=%ld L=%p %s, xrefs: 6E2E38FF
RWL%p %d %s, xrefs: 6E2E3897

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CurrentThreadprintf
String ID: RWL%p %d %s$RWL%p %d V=%0X B=%d r=%ld w=%ld L=%p %s
API String ID: 2356641437-1971217749
Opcode ID: 2486618d8e98d47af41d25d084acdce935484ec367c8eba6fdab1693d987b0be
Instruction ID: c3a05e011051c9f25209416a202d8a141f99b937aa21a5109f74529da681a223
Opcode Fuzzy Hash: 2486618d8e98d47af41d25d084acdce935484ec367c8eba6fdab1693d987b0be
Instruction Fuzzy Hash: 761106B4A083258FE700DF58D45464AFBE1BFCA250F14885EE8888B354D330D804CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4390 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 44COMMON

Download Yara Rule

APIs

pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,Error cleaning up spin_keys for thread ,6E2E49A0,?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E439E
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E43C8
pthread_mutex_init.LIBWINPTHREAD-1 ref: 6E2E4408
calloc.MSVCRT ref: 6E2E441E

Strings

Error cleaning up spin_keys for thread , xrefs: 6E2E4390

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: callocpthread_mutex_initpthread_spin_lockpthread_spin_unlock
String ID: Error cleaning up spin_keys for thread
API String ID: 3482582356-2906507043
Opcode ID: fe97bfdb86fcd63e518335ec056a1eb4c05c564afa5dc0a719ec2c93a82ccfbf
Instruction ID: 653351ead7881390d579ed7565030934dc360d267a414b3c4ec36d51948f1827
Opcode Fuzzy Hash: fe97bfdb86fcd63e518335ec056a1eb4c05c564afa5dc0a719ec2c93a82ccfbf
Instruction Fuzzy Hash: BD0161B0514328CFD700AFA5C084799BBF6AB05318F9188ADD5888FB06D7B59840CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4990 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 37COMMON

Download Yara Rule

APIs

Part of subcall function 6E2E4390: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,Error cleaning up spin_keys for thread ,6E2E49A0,?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E439E
Part of subcall function 6E2E4390: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E43C8
Part of subcall function 6E2E4390: pthread_mutex_init.LIBWINPTHREAD-1 ref: 6E2E4408
Part of subcall function 6E2E4390: calloc.MSVCRT ref: 6E2E441E

pthread_mutex_lock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E49A8
pthread_tls_init.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E49B7

Part of subcall function 6E2E4440: TlsAlloc.KERNEL32(?,?,6E2E49BC,?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E4443

pthread_mutex_unlock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E49C9
fprintf.MSVCRT ref: 6E2E4A11

Strings

Error cleaning up spin_keys for thread , xrefs: 6E2E4996
once %p is %d, xrefs: 6E2E4A06

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Alloccallocfprintfpthread_mutex_initpthread_mutex_lockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlockpthread_tls_init
String ID: once %p is %d$Error cleaning up spin_keys for thread
API String ID: 3187950583-1049478869
Opcode ID: a08d095377b2763309ebbbca8bd98d26043a2404e4e634dd429740f48fc2d3ad
Instruction ID: 5f69d9fc855e9f1063030db22684df0296f4532188e7191360e7c2884cfb7067
Opcode Fuzzy Hash: a08d095377b2763309ebbbca8bd98d26043a2404e4e634dd429740f48fc2d3ad
Instruction Fuzzy Hash: B5F022752087388FC310BFE9D1453AEBBEBBF81308F814C1DD5945BA04D7B589028B92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5410 Relevance: 9.1, APIs: 6, Instructions: 110COMMON

Download Yara Rule

APIs

pthread_rwlock_wrlock.LIBWINPTHREAD-1 ref: 6E2E542A
pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6E2E547B

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_rwlock_unlockpthread_rwlock_wrlock
String ID:
API String ID: 2630845080-0
Opcode ID: 4c5068ee9d789c97d1d094228cf1b7b6f1d9c00df2f9a3176e4bf670c051b3ba
Instruction ID: 40086c1eaaf6898783f98f43c462f87da1144af3ed50ce75567fd73cf4c7bed1
Opcode Fuzzy Hash: 4c5068ee9d789c97d1d094228cf1b7b6f1d9c00df2f9a3176e4bf670c051b3ba
Instruction Fuzzy Hash: 6441C0B56043298FDB50DF9AC48076ABBE3FBC5756F95482DE98887704E731D840CB62

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E1020 Relevance: 9.1, APIs: 6, Instructions: 108sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 6E2E1057
_amsg_exit.MSVCRT ref: 6E2E1085

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Sleep_amsg_exit
String ID:
API String ID: 1015461914-0
Opcode ID: 14df5c523e0fb218b2b2c347e2419e943d8b18c60744a433d0b39df11431b36c
Instruction ID: 8f00abb881ca518a027b3a1cd8387c41183cc7b7c0939754448a57f677fa93b0
Opcode Fuzzy Hash: 14df5c523e0fb218b2b2c347e2419e943d8b18c60744a433d0b39df11431b36c
Instruction Fuzzy Hash: F64181B16183A9CFEB40DFDDC495B5ABBA3EB45B05F80453DD5448FA04D6B188C4CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E64F0 Relevance: 9.1, APIs: 6, Instructions: 80synchronizationCOMMON

Download Yara Rule

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6E2E64FD

Part of subcall function 6E2E4C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C36
Part of subcall function 6E2E4C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C4B

GetHandleInformation.KERNEL32 ref: 6E2E6522

Part of subcall function 6E2E4AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6E2E5ADA,?,?,?,?,6E2E6ADD), ref: 6E2E4AED

WaitForSingleObject.KERNEL32 ref: 6E2E6578
CloseHandle.KERNEL32 ref: 6E2E658D
CloseHandle.KERNEL32 ref: 6E2E659C
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E65BF

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Handle$Close$InformationObjectSingleValueWait__pth_gpointer_lockedpthread_mutex_destroypthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 3385087108-0
Opcode ID: 3c2dc354d9a8ad9ec75f9cfe1afd303b076d8fef118272c4d19ef4c2920b87b5
Instruction ID: 6df5154ffc829ab68d9dbe364a8335567bd9239d74fcd7215de336edc02b44e9
Opcode Fuzzy Hash: 3c2dc354d9a8ad9ec75f9cfe1afd303b076d8fef118272c4d19ef4c2920b87b5
Instruction Fuzzy Hash: 2021A2717143268FEB40EFB8E5C865B7BE6AF44211F804969ED54CB749EB30D840CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3B20 Relevance: 9.1, APIs: 6, Instructions: 77COMMON

Download Yara Rule

APIs

pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E3B2C

Part of subcall function 6E2E3620: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,6E2E3B3E), ref: 6E2E3637
Part of subcall function 6E2E3620: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,6E2E3B3E), ref: 6E2E365F

pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E3B47

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 4077346669-0
Opcode ID: 01fa32669e74d4a8f4ef0fd55ecf726606d4fb00751812182b36a926eac5d0a6
Instruction ID: 0d23923163ee38603c9041dab4186051a07dac637bec4425ad4aa5bffe15e1d5
Opcode Fuzzy Hash: 01fa32669e74d4a8f4ef0fd55ecf726606d4fb00751812182b36a926eac5d0a6
Instruction Fuzzy Hash: 4B214FB470872A8FD750DFB9E4C458AB3E6BF44209F804C6DE886C7B10E774D8858B52

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E2760 Relevance: 9.1, APIs: 6, Instructions: 77COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6E2E279B
RtlLeaveCriticalSection.NTDLL ref: 6E2E27AB
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E27D8
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E27E8
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E27FF
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E280C

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_getclean$CriticalSection$EnterLeavepthread_mutex_unlock
String ID:
API String ID: 83821921-0
Opcode ID: 463e65d94a154b52d564ce07bca2f4cebbd436f46d6fc0b9f22049353ccbd81a
Instruction ID: 5d0f82683a9ce821204289219a4e807ce3ba88b35000d52de9921a83da15d798
Opcode Fuzzy Hash: 463e65d94a154b52d564ce07bca2f4cebbd436f46d6fc0b9f22049353ccbd81a
Instruction Fuzzy Hash: C8315CB590872A8FD700EFA9D58064BBBF5BF88314F400A2DE8959B254D730D944CFE2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E1840 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

Part of subcall function 6E2E14C0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,6E2E1852), ref: 6E2E14CE
Part of subcall function 6E2E14C0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,6E2E1852), ref: 6E2E14F3

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E1868
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E189F

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_lockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 967236581-0
Opcode ID: 9a8536c20706ae71b844ae5d558e9e781c944f6cf5ae49408594620819c87244
Instruction ID: d9dcd0e3d03ececc69cd29b44636b1e87bf3b49d1c07af54e94eec698eacdb37
Opcode Fuzzy Hash: 9a8536c20706ae71b844ae5d558e9e781c944f6cf5ae49408594620819c87244
Instruction Fuzzy Hash: 7021A175A0471E8FD3009FBB988054BB7E6EF80359F448C7DD48587A04E631E889CB81

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E7110 Relevance: 9.1, APIs: 6, Instructions: 64COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 6E2E71B3

Part of subcall function 6E2E6A90: pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E6AB3

ReleaseSemaphore.KERNEL32 ref: 6E2E7178
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6E2E1910), ref: 6E2E718F
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,?,?,?,6E2E1910), ref: 6E2E71AE
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6E2E1910), ref: 6E2E71E2
_errno.MSVCRT ref: 6E2E71E7

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$_errno$ReleaseSemaphorepthread_mutex_lock
String ID:
API String ID: 1829004465-0
Opcode ID: 46f629438ccf32f9bd6ebfc782a6c08f49d43a38eced8b970c9814afecf8c17c
Instruction ID: 4bfea717ccadc20af4026ece03dd691d35456556c8242a7316da382cd76e6d17
Opcode Fuzzy Hash: 46f629438ccf32f9bd6ebfc782a6c08f49d43a38eced8b970c9814afecf8c17c
Instruction Fuzzy Hash: D821CF75A087158FC700DF6AD88860ABBE2AF85324F59CA6CD8A58F7E1E730CC44CB41

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E7040 Relevance: 9.1, APIs: 6, Instructions: 52COMMON

Download Yara Rule

APIs

Part of subcall function 6E2E6A90: pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E6AB3

ReleaseSemaphore.KERNEL32 ref: 6E2E7092
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E70A9
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E70CC
_errno.MSVCRT ref: 6E2E70D1
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E70F2
_errno.MSVCRT ref: 6E2E70F7

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$_errno$ReleaseSemaphorepthread_mutex_lock
String ID:
API String ID: 1829004465-0
Opcode ID: 5b138d38b5eca90e4bca313d5a39fd439e04775760ad655e4adf9221c7fdf8dc
Instruction ID: f2ca1aace2df2ea8987bf93e961e8a31275ecf95aff1b640a90fb64297665b4e
Opcode Fuzzy Hash: 5b138d38b5eca90e4bca313d5a39fd439e04775760ad655e4adf9221c7fdf8dc
Instruction Fuzzy Hash: 701190706083168FC700DFB9C88971AB7E2AF81319F65CA18E4A48B3E2D771DC458B42

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5C20 Relevance: 9.0, APIs: 6, Instructions: 35sleepCOMMON

Download Yara Rule

APIs

Part of subcall function 6E2E4AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6E2E5ADA,?,?,?,?,6E2E6ADD), ref: 6E2E4AED

pthread_testcancel.LIBWINPTHREAD-1 ref: 6E2E5C34
pthread_testcancel.LIBWINPTHREAD-1 ref: 6E2E5C4C
pthread_testcancel.LIBWINPTHREAD-1 ref: 6E2E5C60
Sleep.KERNEL32 ref: 6E2E5C6C
pthread_testcancel.LIBWINPTHREAD-1 ref: 6E2E5C75
Sleep.KERNEL32 ref: 6E2E5C8B

Part of subcall function 6E2E2DC0: WaitForSingleObject.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00000000,00000002,00000001,?,6E2E3036), ref: 6E2E2E1E

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_testcancel$Sleep$ObjectSingleValueWait
String ID:
API String ID: 3679766023-0
Opcode ID: 2f6a54692272bab65df003b4f0a09378e9b6f3a08ea2d59542361b5af3713439
Instruction ID: 71440aba9ce7abe792d8fec44077b90244148dd4aeb4408a31236800a068a739
Opcode Fuzzy Hash: 2f6a54692272bab65df003b4f0a09378e9b6f3a08ea2d59542361b5af3713439
Instruction Fuzzy Hash: 5AF06DB68685398BE6007BF8B58919F3AA5EF0161CF910C24D446A3601EB24C80187E2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E2F90 Relevance: 7.6, APIs: 5, Instructions: 108threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6E2E2FD0

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CurrentThread
String ID:
API String ID: 2882836952-0
Opcode ID: 080023beb13e4958374b9880e493305f79b408a2f0a53fdcae94c92095dd43ea
Instruction ID: 0153e356b6f71dd11cab7ee6b42623e598e9ade145c6f0c4aef05536eae5535a
Opcode Fuzzy Hash: 080023beb13e4958374b9880e493305f79b408a2f0a53fdcae94c92095dd43ea
Instruction Fuzzy Hash: D631C77270422B8FEB009F98D89871777A2FB82326F948579E849CF649D775C840CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3F90 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 4077346669-0
Opcode ID: 990345f7777085ab640bc47c1f7c33d14e348c5abaf988d5ac5ef3552fe7a8b4
Instruction ID: 9a808e116b31dbe66bb941cedf1e57399a4d7fb322239b01779b8ac9942a9179
Opcode Fuzzy Hash: 990345f7777085ab640bc47c1f7c33d14e348c5abaf988d5ac5ef3552fe7a8b4
Instruction Fuzzy Hash: CF316B7460431A8FD708DFA6D48464AB7FABF8831AF80886DE849CB714E730D901CF91

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E68A0 Relevance: 7.6, APIs: 5, Instructions: 82COMMON

Download Yara Rule

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6E2E68BF

Part of subcall function 6E2E4C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C36
Part of subcall function 6E2E4C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C4B

_mbsdup.MSVCRT ref: 6E2E6901
??3@YAXPAX@Z.MSVCRT ref: 6E2E691A
IsDebuggerPresent.KERNEL32 ref: 6E2E693D
RaiseException.KERNEL32 ref: 6E2E696F

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ??3@DebuggerExceptionPresentRaise__pth_gpointer_locked_mbsduppthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 2070848239-0
Opcode ID: 8ce8358901298ddbb58b5876b30b398a9a454f3b44d494333e3bcaf0198d482b
Instruction ID: 2dbf138480a0fa2e63cd488abd8b2c56f61357e5e99ba680d0ede20b8c9e42ef
Opcode Fuzzy Hash: 8ce8358901298ddbb58b5876b30b398a9a454f3b44d494333e3bcaf0198d482b
Instruction Fuzzy Hash: 5B21D37161432A8BD7409FAAE18470ABBF9FB84365F810879EA88CB740D735C840CBD3

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E1A20 Relevance: 7.6, APIs: 5, Instructions: 74COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6E2E1A37
ReleaseSemaphore.KERNEL32 ref: 6E2E1A8E
RtlLeaveCriticalSection.NTDLL ref: 6E2E1A9E
RtlLeaveCriticalSection.NTDLL ref: 6E2E1ABB
RtlLeaveCriticalSection.NTDLL ref: 6E2E1AE4

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CriticalSection$Leave$EnterReleaseSemaphore
String ID:
API String ID: 2813224205-0
Opcode ID: 8a2f390f60f4410cf38c8371a22907da2a3c11f02897f16047f85df1625fdfa7
Instruction ID: bbf11ab22bfd470415168f4c4329fb7ebf9dc81493f3a5b6d5f7d2b6009a8fef
Opcode Fuzzy Hash: 8a2f390f60f4410cf38c8371a22907da2a3c11f02897f16047f85df1625fdfa7
Instruction Fuzzy Hash: 1B216FB26083158FE704AF7DE48961EBBF1FB89211F55093EE94AC7340E631D948CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E6DE0 Relevance: 7.6, APIs: 5, Instructions: 68COMMON

Download Yara Rule

APIs

Part of subcall function 6E2E6A90: pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E6AB3

pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E6E31
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6E58
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6E68
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6E94
_errno.MSVCRT ref: 6E2E6EC7

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_getclean$_errnopthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 84148830-0
Opcode ID: 597fa264143031668b602cf77ba91e3a31eb7bdd144fe2a61f081da19165e1b1
Instruction ID: a7ac5de46f8d6a9d6014e74c87acc5f98d5b7b20b47dc559ee3e425efe97d739
Opcode Fuzzy Hash: 597fa264143031668b602cf77ba91e3a31eb7bdd144fe2a61f081da19165e1b1
Instruction Fuzzy Hash: 58217C745183268FD300DF68C08460BBBE6AF89768F454A1CE994AB3A0D334D9458FD2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E9470 Relevance: 7.6, APIs: 5, Instructions: 61COMMON

Download Yara Rule

APIs

_lock.MSVCRT ref: 6E2E9489
_unlock.MSVCRT ref: 6E2E94B1
calloc.MSVCRT ref: 6E2E94FF

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: _lock_unlockcalloc
String ID:
API String ID: 3876498383-0
Opcode ID: bc7c9211e11e7378f5e61e8f68fd5fd2ba33df29a14fefb0ae377ceaa0f091f3
Instruction ID: 8af4bddd3e47c1e147eda81def8910f08759749638cb8f943d861703565727cf
Opcode Fuzzy Hash: bc7c9211e11e7378f5e61e8f68fd5fd2ba33df29a14fefb0ae377ceaa0f091f3
Instruction Fuzzy Hash: F72181B45043168FD740DFA9C49078A7BE6FF85304F90C9AAD4988B788EB34C450CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E7DA0 Relevance: 7.6, APIs: 5, Instructions: 55timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 6E2E7DDF
GetCurrentProcessId.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6E2E13E5), ref: 6E2E7DF0
GetCurrentThreadId.KERNEL32 ref: 6E2E7DF8
GetTickCount.KERNEL32 ref: 6E2E7E00
QueryPerformanceCounter.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6E2E13E5), ref: 6E2E7E0F

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CurrentTime$CountCounterFilePerformanceProcessQuerySystemThreadTick
String ID:
API String ID: 1445889803-0
Opcode ID: 46f8615a09f145f452009751baa7372e8793c51ebdc7c64418949fb896e44a04
Instruction ID: e7beef4221ca658e02854e201307aa355b165ef9468c6a681a1717b058071cf9
Opcode Fuzzy Hash: 46f8615a09f145f452009751baa7372e8793c51ebdc7c64418949fb896e44a04
Instruction Fuzzy Hash: 26119EB15047158FDB00DF79E48C65BBBE2FB89251F544C39E448CA200EB35D448CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4D88 Relevance: 7.6, APIs: 5, Instructions: 55COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6E2E4DAB
CloseHandle.KERNEL32 ref: 6E2E4DE3
CloseHandle.KERNEL32 ref: 6E2E4DF2
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E4E0B

Part of subcall function 6E2E4C60: __pth_gpointer_locked.LIBWINPTHREAD-1(?,?,?,?,?,?,00000000,?,?,?,6E2E58D2,?,?,?,0000001C,6E2E5A6F), ref: 6E2E4C6A
Part of subcall function 6E2E4C60: pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E4C8B
Part of subcall function 6E2E4C60: pthread_rwlock_rdlock.LIBWINPTHREAD-1 ref: 6E2E4CCE
Part of subcall function 6E2E4C60: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E4CF2
Part of subcall function 6E2E4C60: pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E4D05
Part of subcall function 6E2E4C60: pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6E2E4D1C
Part of subcall function 6E2E4C60: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E4D29

TlsSetValue.KERNEL32 ref: 6E2E4E2F
RtlAddVectoredExceptionHandler.NTDLL ref: 6E2E4E7F
CloseHandle.KERNEL32 ref: 6E2E4EB1
CloseHandle.KERNEL32 ref: 6E2E4EF3
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E4F06

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CloseHandle$Valuepthread_mutex_destroypthread_spin_lockpthread_spin_unlock$ExceptionHandlerVectored__pth_gpointer_lockedpthread_rwlock_rdlockpthread_rwlock_unlock
String ID:
API String ID: 4009224233-0
Opcode ID: 358f383988792106f4f76b06331334b5cccdbc4a888456efac72c8fa9503bc2b
Instruction ID: 32add51d2724cd0f75b13e173c5435c98fcde3d41564804c71179fa79aa15432
Opcode Fuzzy Hash: 358f383988792106f4f76b06331334b5cccdbc4a888456efac72c8fa9503bc2b
Instruction Fuzzy Hash: 2811947060472A8FEB00EFB8D99876A3BE6AF01305F810969E854CB655D734D856CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4771 Relevance: 7.6, APIs: 5, Instructions: 51COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 6E2E469C
??3@YAXPAX@Z.MSVCRT ref: 6E2E46AB
??3@YAXPAX@Z.MSVCRT ref: 6E2E46BA
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,00000000,?,?,?,6E2E5959,?,?,?,?,?,0000001C,6E2E5A6F), ref: 6E2E4702
??3@YAXPAX@Z.MSVCRT ref: 6E2E4793
memmove.MSVCRT ref: 6E2E47D3

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ??3@$memmovepthread_mutex_unlock
String ID:
API String ID: 885880168-0
Opcode ID: 867803da44166ed403eef9eafc6e4e3329ece5ef7438135ce33450919033167b
Instruction ID: 9c10ac70d5b3df4d6ffc30642fd82f8800d0c05e64e14586d4983fe6c4b400a8
Opcode Fuzzy Hash: 867803da44166ed403eef9eafc6e4e3329ece5ef7438135ce33450919033167b
Instruction Fuzzy Hash: 001170B1204B6A8BDB409FA9C4A436A7BF7FB40749F8109ADC944CFB44DB74D445CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E7260 Relevance: 7.5, APIs: 5, Instructions: 45COMMON

Download Yara Rule

APIs

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E7283
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E72A0
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E72B2
_errno.MSVCRT ref: 6E2E72B7
_errno.MSVCRT ref: 6E2E72CA

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: _errnopthread_mutex_unlock$pthread_mutex_lock
String ID:
API String ID: 1880327674-0
Opcode ID: 25e8624ea04e9b53d83b180c0fb65636829e78d0b9ec03ecda758f509af0450b
Instruction ID: 1faf67743c63d4904db226ebeadcb0929dcd7913f10c0f9aa6787e52e51ee7bb
Opcode Fuzzy Hash: 25e8624ea04e9b53d83b180c0fb65636829e78d0b9ec03ecda758f509af0450b
Instruction Fuzzy Hash: CB01843520472A8FD750AFBAC844506B7E6FF86325B91461DF8A447B82D770DC008761

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4673 Relevance: 7.5, APIs: 5, Instructions: 45COMMON

Download Yara Rule

APIs

pthread_mutex_lock.LIBWINPTHREAD-1(?,?,?,?,00000000,?,?,?,6E2E5959,?,?,?,?,?,0000001C,6E2E5A6F), ref: 6E2E467F
??3@YAXPAX@Z.MSVCRT ref: 6E2E469C
??3@YAXPAX@Z.MSVCRT ref: 6E2E46AB
??3@YAXPAX@Z.MSVCRT ref: 6E2E46BA
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,00000000,?,?,?,6E2E5959,?,?,?,?,?,0000001C,6E2E5A6F), ref: 6E2E4702

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ??3@$pthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 4211330938-0
Opcode ID: ad15fc873f10a7f68c97b24378435e4a7274febadada7f7f8dc65fd8aa96a107
Instruction ID: 4b36cf42319af777acefadef941e72d846ee9c661b394b63dfc6750526ceaf38
Opcode Fuzzy Hash: ad15fc873f10a7f68c97b24378435e4a7274febadada7f7f8dc65fd8aa96a107
Instruction Fuzzy Hash: 3E0180B16007298BDF10AFB9D4903A677E7BF41305F8109ACC9449FB45C730D505C792

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E6A90 Relevance: 7.5, APIs: 5, Instructions: 45COMMON

Download Yara Rule

APIs

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E6AB3
pthread_testcancel.LIBWINPTHREAD-1 ref: 6E2E6AD8

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_lockpthread_testcancel
String ID:
API String ID: 78788923-0
Opcode ID: b32667b2f1449701bda2096fa862a7f914cd47437ed206c59b612ffc877214a0
Instruction ID: 119ce8de53ea663e7a18afdbad1a890e808ad313094459a32e2f67e4b7d5a91e
Opcode Fuzzy Hash: b32667b2f1449701bda2096fa862a7f914cd47437ed206c59b612ffc877214a0
Instruction Fuzzy Hash: 6E01D43592433A8F97006FEA94C056777EAEE42329B518539EA6097780D770CC00C751

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4CA7 Relevance: 7.5, APIs: 5, Instructions: 45COMMON

Download Yara Rule

APIs

pthread_rwlock_rdlock.LIBWINPTHREAD-1 ref: 6E2E4CCE
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E4CF2
pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E4D05
pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6E2E4D1C
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E4D29

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_spin_unlock$pthread_rwlock_rdlockpthread_rwlock_unlockpthread_spin_lock
String ID:
API String ID: 1248696315-0
Opcode ID: af04ef9b5cea77bd94d4a670ee0c83eeade4e53f757468cc728026ab4a0897b6
Instruction ID: 9603176a477eaf22bc0a232fb88b626937d3668eed7b1a4b8b445c6fa853060a
Opcode Fuzzy Hash: af04ef9b5cea77bd94d4a670ee0c83eeade4e53f757468cc728026ab4a0897b6
Instruction Fuzzy Hash: B411537490462ECFC760EFA4D881769BBE2BF05305F861849D4854BF61C73AA492CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E64C1 Relevance: 7.5, APIs: 5, Instructions: 44threadsleepCOMMON

Download Yara Rule

APIs

Part of subcall function 6E2E4AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6E2E5ADA,?,?,?,?,6E2E6ADD), ref: 6E2E4AED

_beginthreadex.MSVCRT ref: 6E2E639B
SetThreadPriority.KERNEL32 ref: 6E2E63C3
ResetEvent.KERNEL32 ref: 6E2E63D2
ResumeThread.KERNEL32 ref: 6E2E63E7
Sleep.KERNEL32 ref: 6E2E63F7
CloseHandle.KERNEL32 ref: 6E2E6472
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E6481

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Thread$CloseEventHandlePriorityResetResumeSleepValue_beginthreadexpthread_mutex_destroy
String ID:
API String ID: 2616300590-0
Opcode ID: f568d5a84da43506f1336978374c47984ae6aa3ae5b0dc11be4ed82a5ca928ff
Instruction ID: 625a7095fb461c7dceda3d15f4441a54731d6e79a1a9f19db73a93767136c138
Opcode Fuzzy Hash: f568d5a84da43506f1336978374c47984ae6aa3ae5b0dc11be4ed82a5ca928ff
Instruction Fuzzy Hash: 051170B5418B258FD700AF78E14830EFBF1FF45725F504A1EE5A587690D7349854CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E7590 Relevance: 7.5, APIs: 5, Instructions: 32COMMON

Download Yara Rule

APIs

GetCurrentProcessId.KERNEL32 ref: 6E2E75A8
OpenProcess.KERNEL32 ref: 6E2E75C5
CloseHandle.KERNEL32 ref: 6E2E75D5

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Process$CloseCurrentHandleOpen
String ID:
API String ID: 2750122171-0
Opcode ID: 4fcfab194d928946fdd8687bcbb7228bc4e93d2273cf7b7638b1d03a534d2533
Instruction ID: 00c54c40f6d81f7f90f5f909a8ee943e22248cd7b9d237b44be88e0d21cea0d9
Opcode Fuzzy Hash: 4fcfab194d928946fdd8687bcbb7228bc4e93d2273cf7b7638b1d03a534d2533
Instruction Fuzzy Hash: 8BF0307051872A8FEB006FB8D6CC20F7AA2AF05305FA58528DC658A186EB748448CB62

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5300 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 6E2E4390: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,Error cleaning up spin_keys for thread ,6E2E49A0,?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E439E
Part of subcall function 6E2E4390: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E43C8
Part of subcall function 6E2E4390: pthread_mutex_init.LIBWINPTHREAD-1 ref: 6E2E4408
Part of subcall function 6E2E4390: calloc.MSVCRT ref: 6E2E441E

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E532D
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E5344
fprintf.MSVCRT ref: 6E2E53E8

Strings

once %p is %d, xrefs: 6E2E53DD

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: callocfprintfpthread_mutex_initpthread_mutex_lockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID: once %p is %d
API String ID: 475071572-95064319
Opcode ID: 481ff72a05ff6b05300739ff5bd2117bec773bd307870ae36d1fabc350118f15
Instruction ID: a8ae640a86126cd1fb6520f7de9ee005b5a22ce0aa57e051abd6235da3a3fd39
Opcode Fuzzy Hash: 481ff72a05ff6b05300739ff5bd2117bec773bd307870ae36d1fabc350118f15
Instruction Fuzzy Hash: 6821BF7550832A8FD340DFA6E48075EBBEAFF81315F81881EE88887700D775C401CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E7B40 Relevance: 6.1, APIs: 4, Instructions: 117timeCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6E2E7A68), ref: 6E2E7B73
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6E2E7A68), ref: 6E2E7C00
_errno.MSVCRT ref: 6E2E7C98
_errno.MSVCRT ref: 6E2E7CC2

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Time$FileSystem_errno
String ID:
API String ID: 3586254970-0
Opcode ID: 3bf75185874fcd0cd0ddabf42b393bef51c1e8d826ee3371862b03195486ac79
Instruction ID: ddd3996f077def998b8faae8a11acc70e0d4c91d3e694d13a0976486f2013243
Opcode Fuzzy Hash: 3bf75185874fcd0cd0ddabf42b393bef51c1e8d826ee3371862b03195486ac79
Instruction Fuzzy Hash: 0E41587460871A8FD704DFA9C59461BFBEAAFC8310F508E2DE89987791E774D808CB42

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E2620 Relevance: 6.1, APIs: 4, Instructions: 91COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6E2E265E
RtlLeaveCriticalSection.NTDLL ref: 6E2E2688

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: 19726efe001e1042674cc5a9e3c36d42bf99859074ce10652761d2e155f0e13b
Instruction ID: e807499b87b5ad6cad9b4d9481378f6eaf709a5f2b27f8c4f6a43ad53b9bd2fd
Opcode Fuzzy Hash: 19726efe001e1042674cc5a9e3c36d42bf99859074ce10652761d2e155f0e13b
Instruction Fuzzy Hash: D231F3B26042168FEB40EF6DE4C4656BBE2FF80360F544669EC158F349E370D845CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E24E0 Relevance: 6.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6E2E2516
RtlLeaveCriticalSection.NTDLL ref: 6E2E2540

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: b7e89d512dbd5eeb1008d0172405867910952d79eb18162a2f472759059f637a
Instruction ID: 3b676358dba9be3fe84e1b02dd4737fdf1ae19bfcb52a9259288baa91d5dcda7
Opcode Fuzzy Hash: b7e89d512dbd5eeb1008d0172405867910952d79eb18162a2f472759059f637a
Instruction Fuzzy Hash: 1031CDF25043168FEB48DF29E9D464A7BA2FB84310F548669EC068F649F331D984CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E1CA0 Relevance: 6.1, APIs: 4, Instructions: 65COMMON

Download Yara Rule

APIs

_pthread_time_in_ms_from_timespec.LIBWINPTHREAD-1 ref: 6E2E1CC9
_pthread_time_in_ms.LIBWINPTHREAD-1 ref: 6E2E1D21
_pthread_time_in_ms.LIBWINPTHREAD-1 ref: 6E2E1D36
_pthread_rel_time_in_ms.LIBWINPTHREAD-1 ref: 6E2E1D78

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: _pthread_time_in_ms$_pthread_rel_time_in_ms_pthread_time_in_ms_from_timespec
String ID:
API String ID: 3736242651-0
Opcode ID: 8492a0b9b4bd5b33c1677aa46d3c7cf8a02d1f935d7da6086077cb734987257f
Instruction ID: ded74c348be93a234583cb7df911df023e64bb0fe3c6ebd3ddd0ff6e9d190c2b
Opcode Fuzzy Hash: 8492a0b9b4bd5b33c1677aa46d3c7cf8a02d1f935d7da6086077cb734987257f
Instruction Fuzzy Hash: 8C213875A0832A8FC714DF69C48064BBBE6BBC8744F414D2DE59493640DB30E8898B92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3CC0 Relevance: 6.1, APIs: 4, Instructions: 59COMMON

Download Yara Rule

APIs

Part of subcall function 6E2E3AC0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,6E2E3C32), ref: 6E2E3AD8
Part of subcall function 6E2E3AC0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,6E2E3C32), ref: 6E2E3AEA

pthread_mutex_timedlock.LIBWINPTHREAD-1 ref: 6E2E3CF4
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E3D0E

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_timedlockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 892596361-0
Opcode ID: e44487d0cc375c27c123928135f20965f4a8bacfcc33791cb8c9f78353a1a5a0
Instruction ID: 7f370a2431470d0fcb894feaa0dc9f37698d444148ae50542fd15a134a7f505c
Opcode Fuzzy Hash: e44487d0cc375c27c123928135f20965f4a8bacfcc33791cb8c9f78353a1a5a0
Instruction Fuzzy Hash: D611047120472E9BC3009FAA8C4865AF7EAFF40366F848A6DD45887A20D730D851CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E2290 Relevance: 6.1, APIs: 4, Instructions: 57COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6E2E22B0
RtlLeaveCriticalSection.NTDLL ref: 6E2E22CC
RtlEnterCriticalSection.NTDLL ref: 6E2E2309
RtlLeaveCriticalSection.NTDLL ref: 6E2E2315

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: 3158fc605fec944640ba1900c5ac68092d286f7ff442530a60c7d5efe73c29af
Instruction ID: e97c3277ef980779b9be63cb95653a1965df95b777e4b239b9acffb4b74c834e
Opcode Fuzzy Hash: 3158fc605fec944640ba1900c5ac68092d286f7ff442530a60c7d5efe73c29af
Instruction Fuzzy Hash: 17110AB6A087258FC700EF79E98450EBBF0EF89651F45092DE98987310D231E844CBA3

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4149 Relevance: 6.1, APIs: 4, Instructions: 57COMMON

Download Yara Rule

APIs

pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E4182
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E4192
pthread_cond_timedwait.LIBWINPTHREAD-1 ref: 6E2E41C7
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E41E1

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_getclean$pthread_cond_timedwait
String ID:
API String ID: 4099121300-0
Opcode ID: 0a8f173d284b9becfb9b3e8d7fed251223b73b6348a9f3de01945f30f2f694ab
Instruction ID: 68516dcdd30e4f137afe2e4fe6ba508aa008ef33587f48480ae5a83e984f4ffc
Opcode Fuzzy Hash: 0a8f173d284b9becfb9b3e8d7fed251223b73b6348a9f3de01945f30f2f694ab
Instruction Fuzzy Hash: EC21E2B46087168FD314CF69C08074BBBF5BB98354F408D1DE49A87B20C730E94A8F82

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E7A90 Relevance: 6.1, APIs: 4, Instructions: 55timeCOMMON

Download Yara Rule

APIs

FileTimeToSystemTime.KERNEL32 ref: 6E2E7AED
SetSystemTime.KERNEL32 ref: 6E2E7AFD
_errno.MSVCRT ref: 6E2E7B18
_errno.MSVCRT ref: 6E2E7B2B

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Time$System_errno$File
String ID:
API String ID: 2046127076-0
Opcode ID: 52b386958c5644547045e50a4fb7aa9dc23b8740d0455445556fa28086e678fb
Instruction ID: a509595416877ca7da3f998da9ebd342a0a321cac1817d1126aacf08808298f3
Opcode Fuzzy Hash: 52b386958c5644547045e50a4fb7aa9dc23b8740d0455445556fa28086e678fb
Instruction Fuzzy Hash: AC11E3356043258FD7009E6DDC4814BBBE6BB86321F494A2DE896873D1E3309C04CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5260 Relevance: 6.1, APIs: 4, Instructions: 53COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 6E2E527B
GetProcessAffinityMask.KERNEL32 ref: 6E2E5290
GetCurrentProcess.KERNEL32 ref: 6E2E52CC
SetProcessAffinityMask.KERNEL32 ref: 6E2E52D5

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Process$AffinityCurrentMask
String ID:
API String ID: 1231390398-0
Opcode ID: 5d0f144c60f1fb3780b7f19bf23ff418c64aa129f3daf0b58d01c57bf41c1f1c
Instruction ID: 4d202211c2a2a4909d8fc9ea232ec41c0eea446de1521fb88277e646dc97783c
Opcode Fuzzy Hash: 5d0f144c60f1fb3780b7f19bf23ff418c64aa129f3daf0b58d01c57bf41c1f1c
Instruction Fuzzy Hash: C501C07291472A8BD7009EF9A88824BBBE6BBC0741F41483DE94897600E631D809C7E1

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3EE0 Relevance: 6.1, APIs: 4, Instructions: 53COMMON

Download Yara Rule

APIs

Part of subcall function 6E2E36B0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,?,6E2E3EF1), ref: 6E2E36BD
Part of subcall function 6E2E36B0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,?,6E2E3EF1), ref: 6E2E36E0

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E3F26
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E3F40

Part of subcall function 6E2E3760: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,6E2E3CB6), ref: 6E2E3773
Part of subcall function 6E2E3760: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,6E2E3CB6), ref: 6E2E377D

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$pthread_mutex_lockpthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 3819599913-0
Opcode ID: 13fa31f2f513eea0270b380dad55b607ccd7b8038915c9f840e8afa32da3dd88
Instruction ID: d7ee5112de843a459defd758ee4da292ed09e92087b7195fabe93309b8b96db7
Opcode Fuzzy Hash: 13fa31f2f513eea0270b380dad55b607ccd7b8038915c9f840e8afa32da3dd88
Instruction Fuzzy Hash: 2301CC757047268F9314AEBB8888557B7F7BFC0245B408D6CD45487A18D730D84687C1

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5590 Relevance: 6.1, APIs: 4, Instructions: 53COMMON

Download Yara Rule

APIs

pthread_rwlock_wrlock.LIBWINPTHREAD-1 ref: 6E2E55C7
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E55E7
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E5630
pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6E2E563C

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_lockpthread_mutex_unlockpthread_rwlock_unlockpthread_rwlock_wrlock
String ID:
API String ID: 1134915465-0
Opcode ID: 2fec441a98ca00a26e91601a14205288a33306a500605ac826af9553d123600b
Instruction ID: bc00cb77f66ee11c500b4dd76a6f9dc9efcafc3c7b41a1e39b1595364b148f60
Opcode Fuzzy Hash: 2fec441a98ca00a26e91601a14205288a33306a500605ac826af9553d123600b
Instruction Fuzzy Hash: E3118BB4A1423A8FEBA0DFD9D095766BBB3BB82301F904959C0444BA14C3B09481CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3C20 Relevance: 6.1, APIs: 4, Instructions: 52COMMON

Download Yara Rule

APIs

Part of subcall function 6E2E3AC0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,6E2E3C32), ref: 6E2E3AD8
Part of subcall function 6E2E3AC0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,6E2E3C32), ref: 6E2E3AEA

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E2E3C48
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E3C62

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_lockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 967236581-0
Opcode ID: c2488e48a17e686004593d091d2cc69e7754790361af549fae8c4315625c74d7
Instruction ID: 32be8c3ebfdde39894aaea0e7e5928f92e435b93c0f5bba5a42daceaa03d5fa1
Opcode Fuzzy Hash: c2488e48a17e686004593d091d2cc69e7754790361af549fae8c4315625c74d7
Instruction Fuzzy Hash: 240126712047298FC310AFFA888856BB3EABF8032AF804D7DC48587A10E731D4058B92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3D80 Relevance: 6.1, APIs: 4, Instructions: 52COMMON

Download Yara Rule

APIs

Part of subcall function 6E2E3AC0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,6E2E3C32), ref: 6E2E3AD8
Part of subcall function 6E2E3AC0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,6E2E3C32), ref: 6E2E3AEA

pthread_mutex_trylock.LIBWINPTHREAD-1 ref: 6E2E3DA8
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E3DC2

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_trylockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 1963305777-0
Opcode ID: 523a5165b2678da65e33ed7d756a0a0460756e3676b8b0c042c90712437476c3
Instruction ID: 9df0f359a2ca14e5f46e892f6f1651bd4140b79f62ba67415d9181e2e11cb85c
Opcode Fuzzy Hash: 523a5165b2678da65e33ed7d756a0a0460756e3676b8b0c042c90712437476c3
Instruction Fuzzy Hash: 2F01C8756047298FC3109FBB9C485ABB7EABF40226B844DADC49487A14D735D4058B92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4E9B Relevance: 6.0, APIs: 4, Instructions: 48COMMON

Download Yara Rule

APIs

TlsSetValue.KERNEL32 ref: 6E2E4E2F
CloseHandle.KERNEL32 ref: 6E2E4EB1
CloseHandle.KERNEL32 ref: 6E2E4EF3
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E4F06
CloseHandle.KERNEL32 ref: 6E2E4F1F
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E4F35

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CloseHandle$pthread_mutex_destroy$Value
String ID:
API String ID: 2720804228-0
Opcode ID: 16f84e0138a7fe0a9b0ded76dc9f7a2144b602ceceedb510bdca5315ba497608
Instruction ID: 283ff6e839939a5110ae6e184f0cec7cfd61a5c94c4d726a8bbcee00d8159b75
Opcode Fuzzy Hash: 16f84e0138a7fe0a9b0ded76dc9f7a2144b602ceceedb510bdca5315ba497608
Instruction Fuzzy Hash: 53117CB56043258FEB00AFA8D58875A3BE6AF01305F444868DC449F749DB34D856CBE2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E6F71 Relevance: 6.0, APIs: 4, Instructions: 46COMMON

Download Yara Rule

APIs

pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6F88
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6F98

Part of subcall function 6E2E1FA0: pthread_getevent.LIBWINPTHREAD-1 ref: 6E2E1FBA
Part of subcall function 6E2E1FA0: ResetEvent.KERNEL32 ref: 6E2E2010
Part of subcall function 6E2E1FA0: pthread_testcancel.LIBWINPTHREAD-1 ref: 6E2E2024

pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6FCE
_errno.MSVCRT ref: 6E2E7001

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_getclean$EventReset_errnopthread_geteventpthread_testcancel
String ID:
API String ID: 2513142241-0
Opcode ID: 625ece02a1ccc0a7825e5752005a33378685399c00e089ccd9cec25c08562edc
Instruction ID: 1523b7cfac1ef8d7a966969d86b0fd9c96e5b105b63abe32c87b882563833781
Opcode Fuzzy Hash: 625ece02a1ccc0a7825e5752005a33378685399c00e089ccd9cec25c08562edc
Instruction Fuzzy Hash: FD1148B5A193258FD340DFA8C08434EFBE5AF88754F814A2DF9AAD7360D330D8408B82

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E79E0 Relevance: 6.0, APIs: 4, Instructions: 46COMMON

Download Yara Rule

APIs

clock_gettime.LIBWINPTHREAD-1 ref: 6E2E7A08

Part of subcall function 6E2E77B0: QueryPerformanceFrequency.KERNEL32 ref: 6E2E77E6
Part of subcall function 6E2E77B0: QueryPerformanceCounter.KERNEL32 ref: 6E2E77FE

nanosleep.LIBWINPTHREAD-1 ref: 6E2E7A2F
nanosleep.LIBWINPTHREAD-1 ref: 6E2E7A63
_errno.MSVCRT ref: 6E2E7A6E

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: PerformanceQuerynanosleep$CounterFrequency_errnoclock_gettime
String ID:
API String ID: 78328299-0
Opcode ID: cec89ff6a98e1d34c9044fef7dccf3e07f34c40f46fc79e085bb03250f9c59f3
Instruction ID: fb89865e56d090722747478427a5609aa5cc522038c3d99f2cbbf379b4712717
Opcode Fuzzy Hash: cec89ff6a98e1d34c9044fef7dccf3e07f34c40f46fc79e085bb03250f9c59f3
Instruction Fuzzy Hash: FA1142B49093168FC350DF69E98050BBBE2BF94350F50992EF89587386E330D9858B82

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E48D0 Relevance: 6.0, APIs: 4, Instructions: 44COMMON

Download Yara Rule

APIs

pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4B15,?,?,?,?,?,?,?,?,?,?,?), ref: 6E2E48DC
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E491C
calloc.MSVCRT ref: 6E2E4947

Part of subcall function 6E2E44E0: malloc.MSVCRT ref: 6E2E4515

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: callocmallocpthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 3464030426-0
Opcode ID: fe79e123ebfe2c6ecef0c728e3c9d4a31662e70cb6376d6c4ef9ce550e31edde
Instruction ID: 33bb9f058f9f3862804637ded70951dcd8e0a15ea15a19b416a79bb01f097a63
Opcode Fuzzy Hash: fe79e123ebfe2c6ecef0c728e3c9d4a31662e70cb6376d6c4ef9ce550e31edde
Instruction Fuzzy Hash: 260140B460477A4BDB209FE9849439A769B7B02258FC2047CC9946FB01DB74C506C772

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3FF6 Relevance: 6.0, APIs: 4, Instructions: 43COMMON

Download Yara Rule

APIs

pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E4014
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E4024
pthread_cond_wait.LIBWINPTHREAD-1 ref: 6E2E4052

Part of subcall function 6E2E2760: RtlEnterCriticalSection.NTDLL ref: 6E2E279B
Part of subcall function 6E2E2760: RtlLeaveCriticalSection.NTDLL ref: 6E2E27AB
Part of subcall function 6E2E2760: pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E27D8
Part of subcall function 6E2E2760: pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E27E8
Part of subcall function 6E2E2760: pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E27FF
Part of subcall function 6E2E2760: pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E280C

pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E405F

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_getclean$CriticalSection$EnterLeavepthread_cond_waitpthread_mutex_unlock
String ID:
API String ID: 2872453927-0
Opcode ID: 9915ac7385f399d1cce020a7182c2bf0f422611460911848ff52a7b132d24ec3
Instruction ID: 45da2a897dc572bce660e2e7ea75703beb8568787fb53bc76c36d7b4aad24ede
Opcode Fuzzy Hash: 9915ac7385f399d1cce020a7182c2bf0f422611460911848ff52a7b132d24ec3
Instruction Fuzzy Hash: 0C1127B5908319CFC704DF65C04065AB7E5BF88319F804D6EE89997620D774DA46CF92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E6E43 Relevance: 6.0, APIs: 4, Instructions: 42COMMON

Download Yara Rule

APIs

pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6E58
pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6E68

Part of subcall function 6E2E1FA0: pthread_getevent.LIBWINPTHREAD-1 ref: 6E2E1FBA
Part of subcall function 6E2E1FA0: ResetEvent.KERNEL32 ref: 6E2E2010
Part of subcall function 6E2E1FA0: pthread_testcancel.LIBWINPTHREAD-1 ref: 6E2E2024

pthread_getclean.LIBWINPTHREAD-1 ref: 6E2E6E94
_errno.MSVCRT ref: 6E2E6EC7

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_getclean$EventReset_errnopthread_geteventpthread_testcancel
String ID:
API String ID: 2513142241-0
Opcode ID: 98762d99a6ad8f6d746e33d51338bc5dbc90e50d4ad0978bdfdac66265049a3e
Instruction ID: 9a1bb78d6006116e8cecc66b573f57cf7282a6098b29e41f014dd0c5f7c56fa6
Opcode Fuzzy Hash: 98762d99a6ad8f6d746e33d51338bc5dbc90e50d4ad0978bdfdac66265049a3e
Instruction Fuzzy Hash: 6D113C745187258FD300DF68D08464EBBE1AF89719F854A1CE8E4A72A0C334D9458F92

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5D7C Relevance: 6.0, APIs: 4, Instructions: 40COMMON

Download Yara Rule

APIs

SetEvent.KERNEL32 ref: 6E2E5D9F
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E5DCB
_pthread_invoke_cancel.LIBWINPTHREAD-1 ref: 6E2E5DD0
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E5DDB

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$Event_pthread_invoke_cancel
String ID:
API String ID: 3393619686-0
Opcode ID: 686c550671d4b0f095b1fadf5039c572c78b369997419ed88328a8de21c417b5
Instruction ID: 8d26ac29cbb4f7a6471eff6ac6038eb7087eb765f499a1bd30399b9f9e62b974
Opcode Fuzzy Hash: 686c550671d4b0f095b1fadf5039c572c78b369997419ed88328a8de21c417b5
Instruction Fuzzy Hash: 5A0126B25746A48FDB418FB8CC892897FE1BF46329B65079CCCA99F59AC334D405C710

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E8410 Relevance: 6.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6E2E841E
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,6E2E85DB,?,?,?,?,?,6E2E7F28), ref: 6E2E8445
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,6E2E85DB,?,?,?,?,?,6E2E7F28), ref: 6E2E844C
RtlLeaveCriticalSection.NTDLL ref: 6E2E846C

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: 546f7461055501a2e9d711bd4b602331122d51b436cd67a952ef7ff336caf611
Instruction ID: fbf7761d18c4ba9b98df21001f0d293e0b56635d436ad7def93bec7ee9ace7df
Opcode Fuzzy Hash: 546f7461055501a2e9d711bd4b602331122d51b436cd67a952ef7ff336caf611
Instruction Fuzzy Hash: E8F0A4B2500B6A8FDB00BFF8D58991F7BB5FA41650B4A0468DD844B608EB30A945CBB3

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E6431 Relevance: 6.0, APIs: 4, Instructions: 35threadsleepCOMMON

Download Yara Rule

APIs

SetThreadPriority.KERNEL32 ref: 6E2E63C3
ResetEvent.KERNEL32 ref: 6E2E63D2
ResumeThread.KERNEL32 ref: 6E2E63E7
Sleep.KERNEL32 ref: 6E2E63F7

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: Thread$EventPriorityResetResumeSleep
String ID:
API String ID: 3424743960-0
Opcode ID: c20deeaafbb878de99f1f7388e2ab694529f35f77c1850ca4e6a0148b2686970
Instruction ID: e8e81440d9c2241ffc856a6a91b7b45d2c28c34a949d0c6ca7e77c65f0184893
Opcode Fuzzy Hash: c20deeaafbb878de99f1f7388e2ab694529f35f77c1850ca4e6a0148b2686970
Instruction Fuzzy Hash: 67F0A4B55149218FE7107F7CA54831E7BA1FF05711F10062DE966C6A80D7349854C7D3

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5660 Relevance: 6.0, APIs: 4, Instructions: 34COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6E2E5669

Part of subcall function 6E2E4AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6E2E5ADA,?,?,?,?,6E2E6ADD), ref: 6E2E4AED

pthread_spin_lock.LIBWINPTHREAD-1 ref: 6E2E567E
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E56A2
SetLastError.KERNEL32 ref: 6E2E56AA

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ErrorLast$Valuepthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 3182649391-0
Opcode ID: ff081e0cec9706f9cd47dca0b4c640443e2a0b5defbb8322cb4de6bbf31d5863
Instruction ID: ff5b1f4b0c56c2305e909c9985c53f9c6e08e14b61b3f67c8812b43324d6b4ea
Opcode Fuzzy Hash: ff081e0cec9706f9cd47dca0b4c640443e2a0b5defbb8322cb4de6bbf31d5863
Instruction Fuzzy Hash: 8FF0B4795042288FC740BF78D48894A7BFAFF85314F9608A8FC468B746D7309851CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E5A70 Relevance: 6.0, APIs: 4, Instructions: 32synchronizationCOMMON

Download Yara Rule

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,?,?,?,6E2E5B55,?,?,?,?), ref: 6E2E5A77

Part of subcall function 6E2E4C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C36
Part of subcall function 6E2E4C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6E2E4C6F,?,?,?,?,?,?,00000000,?,?,?,6E2E58D2), ref: 6E2E4C4B

WaitForSingleObject.KERNEL32 ref: 6E2E5AAE
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,?,?,?,?,?,6E2E5B55), ref: 6E2E5AC1
_pthread_invoke_cancel.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,?,?,?,?,?,6E2E5B55), ref: 6E2E5AC6

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$ObjectSingleWait__pth_gpointer_locked_pthread_invoke_cancelpthread_mutex_lock
String ID:
API String ID: 4257296073-0
Opcode ID: 0b7b6cf5d27370b6cd43092df5da1f3e919099fa936bef8d80116c8502df4252
Instruction ID: 4e5e0a933f91cd3dc220c16f6989f2183d9e4102ea1bc7465ae502fd2fe959a5
Opcode Fuzzy Hash: 0b7b6cf5d27370b6cd43092df5da1f3e919099fa936bef8d80116c8502df4252
Instruction Fuzzy Hash: BAF0BEB196472B4FDB00AFB899D57097BE9AF00306FC40C5DD8849B702E330D841C751

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3A60 Relevance: 6.0, APIs: 4, Instructions: 24COMMON

Download Yara Rule

APIs

pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,?,6E2E3B15,?,?,?,?,6E2E3C32), ref: 6E2E3A6D
pthread_rwlock_init.LIBWINPTHREAD-1 ref: 6E2E3A82

Part of subcall function 6E2E3920: calloc.MSVCRT ref: 6E2E3948
Part of subcall function 6E2E3920: pthread_mutex_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6E2E3A87), ref: 6E2E3980
Part of subcall function 6E2E3920: pthread_mutex_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6E2E3A87), ref: 6E2E3997
Part of subcall function 6E2E3920: pthread_cond_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6E2E3A87), ref: 6E2E39AE

pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E3A90
pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,?,6E2E3B15,?,?,?,?,6E2E3C32), ref: 6E2E3AAC

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: pthread_mutex_initpthread_spin_unlock$callocpthread_cond_initpthread_rwlock_initpthread_spin_lock
String ID:
API String ID: 611557388-0
Opcode ID: eaf1043230f54e6f899d68f01f18a8ef6752208578634404e41a730742c41a36
Instruction ID: a3d751f2e8aaff64c9b8db75aad446dbdf04c72808464a39f08b88fcb739b006
Opcode Fuzzy Hash: eaf1043230f54e6f899d68f01f18a8ef6752208578634404e41a730742c41a36
Instruction Fuzzy Hash: E8E0EDB5609228C7C7406FF8E8C6259BBB5BB45319FD00DACD28847B41D37104505753

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E3BD7 Relevance: 6.0, APIs: 4, Instructions: 21COMMON

Download Yara Rule

APIs

pthread_cond_destroy.LIBWINPTHREAD-1 ref: 6E2E3BE6
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E3BF1

Part of subcall function 6E2E3470: CloseHandle.KERNEL32(?,?,?,74E06490,6E2E6D24,?,?,?,?,?,?,?,?,6E2E160A), ref: 6E2E348D
Part of subcall function 6E2E3470: ??3@YAXPAX@Z.MSVCRT ref: 6E2E3499

pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6E2E3BFC
??3@YAXPAX@Z.MSVCRT ref: 6E2E3C0E

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: ??3@pthread_mutex_destroy$CloseHandlepthread_cond_destroy
String ID:
API String ID: 3524040118-0
Opcode ID: 9516e276ec13ede196739bde5570f6dc5ce011ae301a9d6e2ab23e8445cd2457
Instruction ID: 4b8787dd4f61ddb28dcaa45684a67fe99facb9ae0ed6fa13138ede8322904227
Opcode Fuzzy Hash: 9516e276ec13ede196739bde5570f6dc5ce011ae301a9d6e2ab23e8445cd2457
Instruction Fuzzy Hash: FCE0EDF95087188FC721AFA4E484599F7F9BF04218F420D6E98C183610E734E589CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E8190 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 173COMMON

Download Yara Rule

Strings

Unknown pseudo relocation bit size %d., xrefs: 6E2E8294
Unknown pseudo relocation protocol version %d., xrefs: 6E2E83F6

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.
API String ID: 0-395989641
Opcode ID: 681743b3a3e9a033a4434725749cecaede529bde93a93916f394acfdecd7f3e0
Instruction ID: 51793a35a41de4a3b4fbd8f421a8546c3f8b89169332416bde97020da9eb766a
Opcode Fuzzy Hash: 681743b3a3e9a033a4434725749cecaede529bde93a93916f394acfdecd7f3e0
Instruction Fuzzy Hash: D351C47290473E8BDF14CFE8C880A99B7B7BF85304F998955D9945BB09D330E905CB91

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E38B6 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 23threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6E2E38C5
printf.MSVCRT ref: 6E2E3906

Strings

RWL%p %d V=%0X B=%d r=%ld w=%ld L=%p %s, xrefs: 6E2E38FF

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CurrentThreadprintf
String ID: RWL%p %d V=%0X B=%d r=%ld w=%ld L=%p %s
API String ID: 2356641437-4072378567
Opcode ID: d09fcec5fedc685d0ea19e2d9338cf187c7be9c23e2efe828273b8b87b9713e9
Instruction ID: 4e33b00443cdfb1b9eadcab76180a46c5ac2bf972533d891ffa3a094b8827b07
Opcode Fuzzy Hash: d09fcec5fedc685d0ea19e2d9338cf187c7be9c23e2efe828273b8b87b9713e9
Instruction Fuzzy Hash: F8F05AB59087218FDB00CF18E05434AFBE1BF89314F15895EE998AB364D775A9498F82

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E53C1 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 22COMMON

Download Yara Rule

APIs

pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E2E5344

Part of subcall function 6E2E47E0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,00000000,00000004,6E2E49D9,?,Error cleaning up spin_keys for thread ,?,6E2E4AE5), ref: 6E2E47EE
Part of subcall function 6E2E47E0: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E482E

fprintf.MSVCRT ref: 6E2E53E8

Strings

once %p is %d, xrefs: 6E2E53DD

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: fprintfpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID: once %p is %d
API String ID: 52179501-95064319
Opcode ID: 517824776a352c207c9a6fb79715b3fdaa2d8a1db51909c7e2d047d9a6c48e38
Instruction ID: 521a582cec7f8ece8ee6038213ad2ed959243f7201f1b71c5a3fef7027190cca
Opcode Fuzzy Hash: 517824776a352c207c9a6fb79715b3fdaa2d8a1db51909c7e2d047d9a6c48e38
Instruction Fuzzy Hash: 69E01ABA948B388FC7006FE6D5843ADFBE6BF84315F41881ED9C887601D77984418B52

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E4866 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15COMMON

Download Yara Rule

APIs

pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6E2E482E
fprintf.MSVCRT ref: 6E2E488C

Strings

%p not found?!?!, xrefs: 6E2E4881

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: fprintfpthread_spin_unlock
String ID: %p not found?!?!
API String ID: 1334223825-11085004
Opcode ID: 412b56c2b4f749e51498a1debe7e088706ed447a8a1276308d9cd4c08535b9b3
Instruction ID: 3faa5d5fb1f604ddd0f00ba8f5c125685c5a7b42de909abd53d091f49b4d16c1
Opcode Fuzzy Hash: 412b56c2b4f749e51498a1debe7e088706ed447a8a1276308d9cd4c08535b9b3
Instruction Fuzzy Hash: 9EE0B6F58087298BCB00AFA4E445399FBB2BB40314F82485DD6D913610C67568828BA3

Uniqueness

Uniqueness Score: -1.00%

Function 6E2E51A7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 14threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6E2E51B0
printf.MSVCRT ref: 6E2E51D1

Strings

T%p %d %s, xrefs: 6E2E51CA

Memory Dump Source

Source File: 00000002.00000002.430836784.000000006E2E1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6E2E0000, based on PE: true

Associated: 00000002.00000002.430829415.000000006E2E0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430848722.000000006E2EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430854120.000000006E2EF000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430860127.000000006E2F4000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430975176.000000006E356000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000002.00000002.430987635.000000006E366000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6e2e0000_dllhost.jbxd

Similarity

API ID: CurrentThreadprintf
String ID: T%p %d %s
API String ID: 2356641437-3109981362
Opcode ID: 98394e5852d2ba51c0db3a84772ae4351ff95e6829da654ec7b41d076dafce43
Instruction ID: e8b0e1b831899a7c1d81e75c28cdd53bd9924325a88cf9185e699a6624731c7f
Opcode Fuzzy Hash: 98394e5852d2ba51c0db3a84772ae4351ff95e6829da654ec7b41d076dafce43
Instruction Fuzzy Hash: E9D017B58097109FE7109F58E04438EFBE1EF8A310F50C81EE48883204D330A8418B42

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: dllhost.exePID: 5864, Parent PID: 7076COMMON

Execution Graph

Execution Coverage:	0.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	100%
Total number of Nodes:	8
Total number of Limit Nodes:	1

Executed Functions

Function 6E478CA0 Relevance: 6.2, APIs: 4, Instructions: 200
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afe484ca8e4b32ef2328b4524787f361813f7f320ee1a13649b27f0e159e365a
Instruction ID: 903ae937afcf69f5632cb51f43a8ec0af1a3942720af8eb8f7ee0d665a0975b7
Opcode Fuzzy Hash: afe484ca8e4b32ef2328b4524787f361813f7f320ee1a13649b27f0e159e365a
Instruction Fuzzy Hash: 165119716543625FEB308DF8CC80ED2B7A4DB1A364B18072AD5E5CB3CAE7A4540A87E0

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 6E381CB0 Relevance: 9.5, APIs: 6, Instructions: 470
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e28579d8514fd1a80db412670c320d27bccf49e0c372918a8faf55dcf22c7f1f
Instruction ID: 4af94e62b7a940055fc0a3e8a127d6086d59937355c11ffa3cd580c15b1c6536
Opcode Fuzzy Hash: e28579d8514fd1a80db412670c320d27bccf49e0c372918a8faf55dcf22c7f1f
Instruction Fuzzy Hash: AD128A74A08706CFC740CFA9C59065BB7F5BF88354F548A2DE8A99B310E731E949CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E383550 Relevance: 7.6, APIs: 5, Instructions: 55COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 6E38359F
UnhandledExceptionFilter.KERNEL32 ref: 6E3835AF
GetCurrentProcess.KERNEL32 ref: 6E3835B8
TerminateProcess.KERNEL32 ref: 6E3835C9
abort.MSVCRT ref: 6E3835D2

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentTerminateabort
String ID:
API String ID: 520269711-0
Opcode ID: 9e4610be99804642bf9d36951b23cc1af0407df353268c2abe9ef63b38e8d91a
Instruction ID: 58b74c10112ac9016c84193576ab6ac33bb9f3d73340c96b3d3ce4a05508a6e8
Opcode Fuzzy Hash: 9e4610be99804642bf9d36951b23cc1af0407df353268c2abe9ef63b38e8d91a
Instruction Fuzzy Hash: 4711E6B4904B00DFCB40EFB9C14964BBBF8BB5A304F618929E98897300E7759944CF92

Uniqueness

Uniqueness Score: -1.00%

Function 6E38354C Relevance: 7.5, APIs: 5, Instructions: 47COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 6E38359F
UnhandledExceptionFilter.KERNEL32 ref: 6E3835AF
GetCurrentProcess.KERNEL32 ref: 6E3835B8
TerminateProcess.KERNEL32 ref: 6E3835C9
abort.MSVCRT ref: 6E3835D2

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentTerminateabort
String ID:
API String ID: 520269711-0
Opcode ID: 1b0897ecc55e7f7d69b1f20437d758d475245a413277bac486c6a3fb5c971408
Instruction ID: c08385665b4b56da6fd4930038311d2df3455562d39e9d4151b7d4c8d451cfa2
Opcode Fuzzy Hash: 1b0897ecc55e7f7d69b1f20437d758d475245a413277bac486c6a3fb5c971408
Instruction Fuzzy Hash: 7811E9B5904A04DFDB40EFB9C54964B7FF8BB1B300F618929E98997340E7749944CF92

Uniqueness

Uniqueness Score: -1.00%

Function 6E371AC0 Relevance: 1.6, APIs: 1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cb26561d8d97a804de4f4aaa09e2e3343bcd7b4324d22b777236a92fea5d7a1
Instruction ID: 86bf5f7a40ab674e08cb0103c4c519b3c786fe4a647e0b5334eaeb8078e81d50
Opcode Fuzzy Hash: 8cb26561d8d97a804de4f4aaa09e2e3343bcd7b4324d22b777236a92fea5d7a1
Instruction Fuzzy Hash: DC41E636F047264BFBD044E89DA039775CA9B88382F165538EF9ED7BC1E65ACC498680

Uniqueness

Uniqueness Score: -1.00%

Function 6E383220 Relevance: 21.2, APIs: 14, Instructions: 154
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

pthread_getspecific.LIBWINPTHREAD-1 ref: 6E38323A
pthread_once.LIBWINPTHREAD-1 ref: 6E38327F
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E38328B
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E3832A2

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: pthread_getspecificpthread_mutex_lockpthread_mutex_unlockpthread_once
String ID:
API String ID: 3632289657-0
Opcode ID: db94b3fa5e79eadd2a064dd6c9205517135b1fcac136de53e2e6de5a9ded906e
Instruction ID: afa84ecdf8e359cff340fdc9b3c146274522f5e61736ded715de5fddaa5cbbf0
Opcode Fuzzy Hash: db94b3fa5e79eadd2a064dd6c9205517135b1fcac136de53e2e6de5a9ded906e
Instruction Fuzzy Hash: E05178B5608706CFDB00DFA5D48859BBBE8FF85708F51882DD9988B310EB34E949CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6E3836E0 Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 124
filememoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

fwrite.MSVCRT ref: 6E38370F
vfprintf.MSVCRT ref: 6E38372F
abort.MSVCRT ref: 6E383734
VirtualQuery.KERNEL32 ref: 6E3837C7
VirtualProtect.KERNEL32 ref: 6E38381D
GetLastError.KERNEL32 ref: 6E38382A

Strings

VirtualProtect failed with code 0x%x, xrefs: 6E383830
@, xrefs: 6E38380E
VirtualQuery failed for %d bytes at address %p, xrefs: 6E383857
Mingw-w64 runtime failure:, xrefs: 6E383708
Address %p has no image-section, xrefs: 6E38386B

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: Virtual$ErrorLastProtectQueryabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$@$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 1616349570-4164700141
Opcode ID: 3d894bec2202fbce2c1f9c7caa24199d80277f2e6d5c7cbdec2757058be0c70b
Instruction ID: ea1e58e2e41ee9ebc4bf37ca07cd885279d8cddfb4f6806ba4c15d9c3e5c4cf5
Opcode Fuzzy Hash: 3d894bec2202fbce2c1f9c7caa24199d80277f2e6d5c7cbdec2757058be0c70b
Instruction Fuzzy Hash: 654156B59087019BDB00EFA9C58865BFBE8FF85754F91892DE88887304E375D805CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E382F50 Relevance: 15.2, APIs: 10, Instructions: 158
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_Unwind_GetLanguageSpecificData.LIBGCC_S_SJLJ-1 ref: 6E382F97
_Unwind_GetRegionStart.LIBGCC_S_SJLJ-1 ref: 6E382FB1
_Unwind_GetTextRelBase.LIBGCC_S_SJLJ-1 ref: 6E382FE3

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: Unwind_$BaseDataLanguageRegionSpecificStartText
String ID:
API String ID: 2117219864-0
Opcode ID: 701d53fac9037ead737795c9b37ad48d38ec1938811da6dbc2a5a50aed6d314a
Instruction ID: f7cbbe603ab040826e2a904d5c3ef0f4b5fb7c9ffdf026bb8a9ede0c8b1ea84d
Opcode Fuzzy Hash: 701d53fac9037ead737795c9b37ad48d38ec1938811da6dbc2a5a50aed6d314a
Instruction Fuzzy Hash: A6519CB284C3528BDB008BA8C59835BFBE5AF82708F048D5DE8D597344D37AE949CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6E371790 Relevance: 15.1, APIs: 10, Instructions: 51
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d17d5bfc4e2e0aa42ce316c95d413424c85c763f5203f2428c24c274dc7b5c84
Instruction ID: 3ecba990dd1ae0c876bb8790ecd6de216218337a1ca7526cab9c532da0b26a64
Opcode Fuzzy Hash: d17d5bfc4e2e0aa42ce316c95d413424c85c763f5203f2428c24c274dc7b5c84
Instruction Fuzzy Hash: 9FE0F635EA210302A500AEB574A92BBEFBC9E63A4CFE43C20C882B3900BB05C11A414E

Uniqueness

Uniqueness Score: -1.00%

Function 6E3717B0 Relevance: 13.7, APIs: 9, Instructions: 160
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a592807b82592b05898f0a69e85e6f7e5e94c41849dcb607012232ebbcce9c9
Instruction ID: c136a1c92e44e2e4aea37476f089dedd90e9d588743f87d70d05f288801379cb
Opcode Fuzzy Hash: 7a592807b82592b05898f0a69e85e6f7e5e94c41849dcb607012232ebbcce9c9
Instruction Fuzzy Hash: AA414832F043220BF78048A899503B7BAEDDF96785F126D34DE8DE3A80F65ACC468184

Uniqueness

Uniqueness Score: -1.00%

Function 6E371020 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 108
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 6E371057
_amsg_exit.MSVCRT ref: 6E371085

Strings

068n, xrefs: 6E371115

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: Sleep_amsg_exit
String ID: 068n
API String ID: 1015461914-1276923451
Opcode ID: 085b67404abaec3497b29da9a8fab6c235c45c25d472db866fc2eaff59a62498
Instruction ID: 113801903cc9b2fb4119d07ab9f80bc4a5e6851665cebcfd8167f83f6aa89273
Opcode Fuzzy Hash: 085b67404abaec3497b29da9a8fab6c235c45c25d472db866fc2eaff59a62498
Instruction Fuzzy Hash: 0A41C3B66087418FEF60DF99C4A075B77E8FB92740FA0496DD5848B204D77AC888CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E375CB8 Relevance: 12.2, APIs: 8, Instructions: 188
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__divtf3.LIBGCC_S_SJLJ-1 ref: 6E375D0E
__multf3.LIBGCC_S_SJLJ-1 ref: 6E375D6D
__addtf3.LIBGCC_S_SJLJ-1 ref: 6E375DCC
__multf3.LIBGCC_S_SJLJ-1 ref: 6E375E4E
__addtf3.LIBGCC_S_SJLJ-1 ref: 6E375EA6
__divtf3.LIBGCC_S_SJLJ-1 ref: 6E375F14
__multf3.LIBGCC_S_SJLJ-1 ref: 6E375F8F
__subtf3.LIBGCC_S_SJLJ-1 ref: 6E375FE7

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: __multf3$__addtf3__divtf3$__subtf3
String ID:
API String ID: 4134955765-0
Opcode ID: f3ad73b0e7dc81b78af565521272114c137faf757a2b8486b8f3777902771e13
Instruction ID: 493f399fdc11a1de4841098363f82ecfdfa8aeebb2c09bdbef6da6a71e31fa27
Opcode Fuzzy Hash: f3ad73b0e7dc81b78af565521272114c137faf757a2b8486b8f3777902771e13
Instruction Fuzzy Hash: 81B1E7B89087818FC364CF59D180A5AFBE1BFC8754F108E2EE9D9A3310D774A9458F96

Uniqueness

Uniqueness Score: -1.00%

Function 6E3717E0 Relevance: 12.2, APIs: 8, Instructions: 157
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31e7852bef0ff1c478190ed63a23918ae8e9a83ffc8e45683af96d7b7b954491
Instruction ID: ac3e922a6a7595b653b891f3e6f9bacc73b13b16b72a9612fb2f4f84f87275fd
Opcode Fuzzy Hash: 31e7852bef0ff1c478190ed63a23918ae8e9a83ffc8e45683af96d7b7b954491
Instruction Fuzzy Hash: C8412B36F453220BF7D048A899603B7B6EDDB86785F112D34DE8DE3A80FA5ACC468584

Uniqueness

Uniqueness Score: -1.00%

Function 6E382F8C Relevance: 12.1, APIs: 8, Instructions: 119
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_Unwind_GetLanguageSpecificData.LIBGCC_S_SJLJ-1 ref: 6E382F97
_Unwind_GetRegionStart.LIBGCC_S_SJLJ-1 ref: 6E382FB1
_Unwind_GetTextRelBase.LIBGCC_S_SJLJ-1 ref: 6E382FE3

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: Unwind_$BaseDataLanguageRegionSpecificStartText
String ID:
API String ID: 2117219864-0
Opcode ID: 2dd0be2c8afd7f4de1a7e70d093e460c85bfc2d7a911f66f769f52a6d91362ac
Instruction ID: 6b3df975b31fc7efd3e1f903cecbab72c6d8f7783b1675d8881a74c46e5dd261
Opcode Fuzzy Hash: 2dd0be2c8afd7f4de1a7e70d093e460c85bfc2d7a911f66f769f52a6d91362ac
Instruction Fuzzy Hash: 92418CB28087528FDB008FA8C99835BFBE5AF42708F058D5DE8D597344D37AE949CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6E371810 Relevance: 10.7, APIs: 7, Instructions: 162
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

abort.MSVCRT ref: 6E384348
abort.MSVCRT ref: 6E384350
abort.MSVCRT ref: 6E384358
abort.MSVCRT(?), ref: 6E384360
abort.MSVCRT(?), ref: 6E384368
abort.MSVCRT(?), ref: 6E384370
abort.MSVCRT(?), ref: 6E384378

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: d2c8ed23543880eaed1cd35157d17a1e7a4bfe4f89a72cb90db9e4d4d6f64ffb
Instruction ID: 027bc610a29bc86da532e8a71253355773b65674d659c7e25fb58448a0957262
Opcode Fuzzy Hash: d2c8ed23543880eaed1cd35157d17a1e7a4bfe4f89a72cb90db9e4d4d6f64ffb
Instruction Fuzzy Hash: 08413E32F043220BF79048A899503A7B6DDDF95785F161D38DEDDE3B80E659CC458581

Uniqueness

Uniqueness Score: -1.00%

Function 6E371860 Relevance: 9.2, APIs: 6, Instructions: 150
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5c1866b20964f26f89f5039afd385993a57dab2092fb53c49ffd65a26e0c567
Instruction ID: e2f311cd62abeb10ced716af91964b3f0eb07bc1586509b93e3bdc3806cbcadd
Opcode Fuzzy Hash: b5c1866b20964f26f89f5039afd385993a57dab2092fb53c49ffd65a26e0c567
Instruction Fuzzy Hash: F7413936F543220BF7D048A899603A7B6DDDB86786F125D38DEDDE3A80FA5ACC458580

Uniqueness

Uniqueness Score: -1.00%

Function 6E382500 Relevance: 9.1, APIs: 6, Instructions: 71COMMON

Download Yara Rule

APIs

pthread_once.LIBWINPTHREAD-1 ref: 6E382522
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E38252E
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E382564

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: pthread_mutex_lockpthread_mutex_unlockpthread_once
String ID:
API String ID: 3726264613-0
Opcode ID: a532b56b72ae934e63d3f08d9a026db4a076c861a3f863206fbe5c51c85db4fd
Instruction ID: fb21dd83c208a4e788bf486f0e832adeae5b0c0693f9de743fd3d6c7ad043a71
Opcode Fuzzy Hash: a532b56b72ae934e63d3f08d9a026db4a076c861a3f863206fbe5c51c85db4fd
Instruction Fuzzy Hash: 34218EB26892019FDB41DFE8D6A465BFBB8BF42384B8104AAC9945F305F731D845CB63

Uniqueness

Uniqueness Score: -1.00%

Function 6E371890 Relevance: 7.7, APIs: 5, Instructions: 155COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6E384358
abort.MSVCRT(?), ref: 6E384360
abort.MSVCRT(?), ref: 6E384368
abort.MSVCRT(?), ref: 6E384370
abort.MSVCRT(?), ref: 6E384378

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 1d5e638318db9f99516e559f273de3f3e1ea28fccfb35ab78fdfc12ca5af33db
Instruction ID: 600ccfa75efcf3f3be551e925068a0a6e8ce13164864d8734f5af3fa7e2b8c62
Opcode Fuzzy Hash: 1d5e638318db9f99516e559f273de3f3e1ea28fccfb35ab78fdfc12ca5af33db
Instruction Fuzzy Hash: E8412C36F043220BF79048AC99503A7B6DDDBC9781F165939EEDDE3B80E66ACC468580

Uniqueness

Uniqueness Score: -1.00%

Function 6E376053 Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

__unordtf2.LIBGCC_S_SJLJ-1 ref: 6E374FB7
__lttf2.LIBGCC_S_SJLJ-1 ref: 6E374FFF
__unordtf2.LIBGCC_S_SJLJ-1 ref: 6E37504E
__gttf2.LIBGCC_S_SJLJ-1 ref: 6E375099
__unordtf2.LIBGCC_S_SJLJ-1 ref: 6E3750E8
__gttf2.LIBGCC_S_SJLJ-1 ref: 6E375133
__unordtf2.LIBGCC_S_SJLJ-1 ref: 6E375187
__floatsitf.LIBGCC_S_SJLJ-1 ref: 6E3751AA
__unordtf2.LIBGCC_S_SJLJ-1 ref: 6E375237
__floatsitf.LIBGCC_S_SJLJ-1 ref: 6E375255
__multf3.LIBGCC_S_SJLJ-1 ref: 6E3752DD
__multf3.LIBGCC_S_SJLJ-1 ref: 6E375349
__netf2.LIBGCC_S_SJLJ-1 ref: 6E376097
__unordtf2.LIBGCC_S_SJLJ-1 ref: 6E3760D3
__unordtf2.LIBGCC_S_SJLJ-1 ref: 6E37610B
__multf3.LIBGCC_S_SJLJ-1 ref: 6E37616E
__multf3.LIBGCC_S_SJLJ-1 ref: 6E3761EA

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: __unordtf2$__multf3$__floatsitf__gttf2$__lttf2__netf2
String ID:
API String ID: 3166148315-0
Opcode ID: e8a7e02de4f2030d3140da2ba7fb9f8ebae3f95a0ef42c85d349928de04c776b
Instruction ID: 01ae333784daf6d8e7b8875acf9f6fa97ff84efcfe611a10e592595ce7a6e54a
Opcode Fuzzy Hash: e8a7e02de4f2030d3140da2ba7fb9f8ebae3f95a0ef42c85d349928de04c776b
Instruction Fuzzy Hash: 2E51F6B4A087819FD760CF69C18074AFBE0BB88754F108D2EE998D7310E775E9498F96

Uniqueness

Uniqueness Score: -1.00%

Function 6E3841E0 Relevance: 7.6, APIs: 5, Instructions: 61COMMON

Download Yara Rule

APIs

_lock.MSVCRT ref: 6E3841F9
_unlock.MSVCRT ref: 6E384221
calloc.MSVCRT ref: 6E38426F

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: _lock_unlockcalloc
String ID:
API String ID: 3876498383-0
Opcode ID: f8768f458ee389f683f81301db044f0bf72636460b241e859b8616a28650da8e
Instruction ID: d80399d63b63abc97823826774fd8468383409c514da1236caf771235ff711da
Opcode Fuzzy Hash: f8768f458ee389f683f81301db044f0bf72636460b241e859b8616a28650da8e
Instruction Fuzzy Hash: E9215C706082128FD744DFA9D48065FBBECBF85314F55CA69D4988B688EB74C842CB62

Uniqueness

Uniqueness Score: -1.00%

Function 6E383490 Relevance: 7.6, APIs: 5, Instructions: 55timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 6E3834CF
GetCurrentProcessId.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6E3713E5), ref: 6E3834E0
GetCurrentThreadId.KERNEL32 ref: 6E3834E8
GetTickCount.KERNEL32 ref: 6E3834F0
QueryPerformanceCounter.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6E3713E5), ref: 6E3834FF

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: CurrentTime$CountCounterFilePerformanceProcessQuerySystemThreadTick
String ID:
API String ID: 1445889803-0
Opcode ID: b5c965a3de82e855c007a110e087ec5f43c191f87017d13b0759817e1d810306
Instruction ID: bf1215fa839cc9ce81ea1c7126f18883c95e0d408024b7735531a9b5f66581d3
Opcode Fuzzy Hash: b5c965a3de82e855c007a110e087ec5f43c191f87017d13b0759817e1d810306
Instruction Fuzzy Hash: 0D1152B59047018FCB40DF79E48854BBBE8FB8A265F155C3AE445C7300EA35D449CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E381320 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 30memoryCOMMON

Download Yara Rule

APIs

VirtualQuery.KERNEL32 ref: 6E38133A
VirtualProtect.KERNEL32 ref: 6E38136A
abort.MSVCRT ref: 6E3849B0

Strings

@, xrefs: 6E38134F

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: Virtual$ProtectQueryabort
String ID: @
API String ID: 1854752096-2766056989
Opcode ID: 41ca68d2244019fefe43949899b547e56969b8e4724f0412d7b28a246935a254
Instruction ID: 8ba3b1f9eafe74441820ee0535d13ba871e997e96dd8cdffd94e82f624fe87f0
Opcode Fuzzy Hash: 41ca68d2244019fefe43949899b547e56969b8e4724f0412d7b28a246935a254
Instruction Fuzzy Hash: B9F0BCB48083019FD740EF68D28861ABBF8BB89704F508C2DE88893200E738CA48CB53

Uniqueness

Uniqueness Score: -1.00%

Function 6E3718D0 Relevance: 6.1, APIs: 4, Instructions: 137COMMON

Download Yara Rule

APIs

abort.MSVCRT(?), ref: 6E384360
abort.MSVCRT(?), ref: 6E384368
abort.MSVCRT(?), ref: 6E384370
abort.MSVCRT(?), ref: 6E384378

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 66070c6083c600bfd85b2dd3f7cf19f40b691392022c71ce44fb8c0e672182be
Instruction ID: 9311c878617db8d6b53bcd3c4d471118135ef06a914fb45c2b2df6371f2786e4
Opcode Fuzzy Hash: 66070c6083c600bfd85b2dd3f7cf19f40b691392022c71ce44fb8c0e672182be
Instruction Fuzzy Hash: A8314732F143220BF7D048A89D503A7B6DDDB95786F121938EEDEE3AC1F65ACC458680

Uniqueness

Uniqueness Score: -1.00%

Function 6E382630 Relevance: 6.1, APIs: 4, Instructions: 103COMMON

Download Yara Rule

APIs

pthread_once.LIBWINPTHREAD-1 ref: 6E38264E
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E38265A
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E382695
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E382768

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$pthread_mutex_lockpthread_once
String ID:
API String ID: 1416322145-0
Opcode ID: ab6008a18b11bd39f884b03e410ca789c170e8c469725822f53c7e3d0d797cfc
Instruction ID: 862a460b3aa102b12a9a7da4c479206b0e675669d606f5b6934bbbad9aec37fc
Opcode Fuzzy Hash: ab6008a18b11bd39f884b03e410ca789c170e8c469725822f53c7e3d0d797cfc
Instruction Fuzzy Hash: 9E31CFB5B04712CFC701DFE9D280657B7F8BF45280B414979E9988B305EB71D808CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6E382D70 Relevance: 6.1, APIs: 4, Instructions: 92COMMON

Download Yara Rule

APIs

pthread_getspecific.LIBWINPTHREAD-1 ref: 6E382DDC
abort.MSVCRT ref: 6E382E2D
_Unwind_SjLj_RaiseException.LIBGCC_S_SJLJ-1 ref: 6E382E52

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: ExceptionRaiseUnwind_abortpthread_getspecific
String ID:
API String ID: 2170471676-0
Opcode ID: 144cc0e80126c53808131aba5e200a75d454c5319d0e11954024eb6568ccf611
Instruction ID: d21250a02dce0e73f756dd99f4e3693550968f0ac132ce33a85b1afed30fb5aa
Opcode Fuzzy Hash: 144cc0e80126c53808131aba5e200a75d454c5319d0e11954024eb6568ccf611
Instruction Fuzzy Hash: FC316BB1A083069BCB40DFA4C5C068BBBF8BF94254F508D5CE8D997305E730E949CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6E383126 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

_Unwind_GetIPInfo.LIBGCC_S_SJLJ-1 ref: 6E383078
_Unwind_SetGR.LIBGCC_S_SJLJ-1 ref: 6E3830DE
_Unwind_SetGR.LIBGCC_S_SJLJ-1 ref: 6E3830FA
_Unwind_SetIP.LIBGCC_S_SJLJ-1 ref: 6E38310A

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: Unwind_$Info
String ID:
API String ID: 284607-0
Opcode ID: a3c2084179b1c6e9802d913630dfc32007e38162d625ac7085b996b25c167839
Instruction ID: 2dd2c0791ca446c36c99221d54e439c054a21d2ec475fcb89aa9450dfa1cb6cb
Opcode Fuzzy Hash: a3c2084179b1c6e9802d913630dfc32007e38162d625ac7085b996b25c167839
Instruction Fuzzy Hash: 042138B28487529FD7108FA8C99834BFBE4AF41708F058D5DE8D997340D37AE9888B42

Uniqueness

Uniqueness Score: -1.00%

Function 6E3832A9 Relevance: 6.0, APIs: 4, Instructions: 44COMMON

Download Yara Rule

APIs

calloc.MSVCRT ref: 6E3832C1
pthread_setspecific.LIBWINPTHREAD-1 ref: 6E3832E1
malloc.MSVCRT ref: 6E383304
memcpy.MSVCRT ref: 6E38332C
malloc.MSVCRT ref: 6E3833B3
abort.MSVCRT ref: 6E383407

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: malloc$abortcallocmemcpypthread_setspecific
String ID:
API String ID: 3946005423-0
Opcode ID: eb35e9b719f226bf9cb94befdce4f42d80daaebd58cce49f9dd0ad80b56735ed
Instruction ID: 92a448d600560e5c5604d41a1278d712f97f83cf51f50940ec629afe6846e40f
Opcode Fuzzy Hash: eb35e9b719f226bf9cb94befdce4f42d80daaebd58cce49f9dd0ad80b56735ed
Instruction Fuzzy Hash: 5601E5B56047068FDB40DFA4D58469BBBE8EF58708F128829D9999B700E734E906CB51

Uniqueness

Uniqueness Score: -1.00%

Function 6E383B00 Relevance: 6.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6E383B0E
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,6E383CCB,?,?,?,?,?,6E383618), ref: 6E383B35
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,6E383CCB,?,?,?,?,?,6E383618), ref: 6E383B3C
RtlLeaveCriticalSection.NTDLL ref: 6E383B5C

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: c9726d0a45c8f41f017e43cb61fe4ebbf235f81af7a46539c60938f22e6070c9
Instruction ID: fe0a61626e439495ebb5fed86c0a94ce87e2d80c7f4fc54e4c8d54c99a0f5f34
Opcode Fuzzy Hash: c9726d0a45c8f41f017e43cb61fe4ebbf235f81af7a46539c60938f22e6070c9
Instruction Fuzzy Hash: F1F0C2B6600B118BCB40BFF9C9C950B7BB8EE56700F010538DD4447308E635E945CBA3

Uniqueness

Uniqueness Score: -1.00%

Function 6E383266 Relevance: 6.0, APIs: 4, Instructions: 33COMMON

Download Yara Rule

APIs

pthread_getspecific.LIBWINPTHREAD-1 ref: 6E38323A
pthread_once.LIBWINPTHREAD-1 ref: 6E38327F
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6E38328B
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6E3832A2
calloc.MSVCRT ref: 6E3832C1
pthread_setspecific.LIBWINPTHREAD-1 ref: 6E3832E1
malloc.MSVCRT ref: 6E383304
memcpy.MSVCRT ref: 6E38332C
realloc.MSVCRT ref: 6E38335D
memset.MSVCRT ref: 6E38338A
pthread_setspecific.LIBWINPTHREAD-1 ref: 6E38339B

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID: pthread_setspecific$callocmallocmemcpymemsetpthread_getspecificpthread_mutex_lockpthread_mutex_unlockpthread_oncerealloc
String ID:
API String ID: 2262861080-0
Opcode ID: 91a1167482f987be220c79a1df8253a8174c5ba699dc49d611e3a884d8364cb3
Instruction ID: f5733fb594ba733c0bdf770a29456521cbc7e1980e56ce78eb474616ba89e205
Opcode Fuzzy Hash: 91a1167482f987be220c79a1df8253a8174c5ba699dc49d611e3a884d8364cb3
Instruction Fuzzy Hash: 9EF090B764570ADFDB406FD8D48525BB3A4EF41718F81082CCA946B300DB71A5448BA3

Uniqueness

Uniqueness Score: -1.00%

Function 6E383880 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 173COMMON

Download Yara Rule

Strings

Unknown pseudo relocation bit size %d., xrefs: 6E383984
Unknown pseudo relocation protocol version %d., xrefs: 6E383AE6

Memory Dump Source

Source File: 0000000B.00000002.432068226.000000006E371000.00000040.00000001.01000000.00000009.sdmp, Offset: 6E370000, based on PE: true

Associated: 0000000B.00000002.432037875.000000006E370000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432119274.000000006E386000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432157219.000000006E38A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.432187493.000000006E38E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.433334948.000000006E479000.00000004.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_6e370000_dllhost.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.
API String ID: 0-395989641
Opcode ID: e66e838e3358194254c7e91595c835ff2687f1b15eeb9a50009df3be244f6012
Instruction ID: 182e56e2017fc6d9f3df78cfc26f4c444061c851cc7e1c67abaab2eb51236246
Opcode Fuzzy Hash: e66e838e3358194254c7e91595c835ff2687f1b15eeb9a50009df3be244f6012
Instruction Fuzzy Hash: 2351B4B5A00615CBCB10CFA8C98468BBBBAFB86314F5185A9D994EB385D331E905CB91

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: dllhost.exePID: 6496, Parent PID: 7076COMMON

Execution Graph

Execution Coverage:	0.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1847
Total number of Limit Nodes:	0

Executed Functions

Function 6DB24D60 Relevance: 19.6, APIs: 13, Instructions: 130
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 31%

			E6DB24D60(void* __ebp, intOrPtr _a8, intOrPtr _a12) {
				intOrPtr _v24;
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr _t30;
				intOrPtr _t31;
				intOrPtr _t34;
				void* _t35;
				intOrPtr _t36;
				intOrPtr _t46;
				intOrPtr _t48;
				intOrPtr _t58;
				intOrPtr _t62;
				intOrPtr _t65;
				void* _t67;
				intOrPtr _t70;
				intOrPtr _t71;
				void* _t73;
				intOrPtr* _t74;

				_t74 = _t73 - 0x10;
				_t30 = _a8;
				if(_t30 != 0) {
					if(_t30 == 1) {
						_v24 = E6DB24370;
						 *_t74 = 1; // executed
						_t31 =  *0x6db2f180(); // executed
						 *0x6db2c02c = _t31;
						return 1;
					} else {
						if(_t30 == 3) {
							_t34 =  *0x6db2a020;
							if(_t34 != 0xffffffff) {
								 *_t74 = _t34;
								_t35 = TlsGetValue(??);
								_t74 = _t74 - 4;
								_t67 = _t35;
								if(_t35 != 0) {
									if(( *(_t35 + 0x20) & 0x00000030) == 0) {
										_t36 =  *((intOrPtr*)(_t35 + 0x18));
										if( *((intOrPtr*)(_t67 + 0x68)) != 0) {
											if(_t36 != 0) {
												 *_t74 = _t36;
												CloseHandle(??);
												_t74 = _t74 - 4;
											}
											_t27 = _t67 + 0x1c; // 0x1c
											 *((intOrPtr*)(_t67 + 0x18)) = 0;
											 *_t74 = _t27;
											E6DB23470();
											_t29 = _t67 + 0x38; // 0x38
											E6DB24A20(_t29, _t67, _t70, _t71);
										} else {
											if(_t36 != 0) {
												 *_t74 = _t36;
												CloseHandle(??);
												_t74 = _t74 - 4;
											}
											_t42 =  *((intOrPtr*)(_t67 + 0xb4));
											 *((intOrPtr*)(_t67 + 0x18)) = 0;
											 *((intOrPtr*)(_t67 + 0x68)) = 1;
											if( *((intOrPtr*)(_t67 + 0xb4)) != 0) {
												E6DB24C60(_t42);
											}
											_t20 = _t67 + 0x1c; // 0x1c
											_t70 = _t20;
											_t21 = _t67 + 0x38; // 0x38
											_t71 = _t21;
											if(( *(_t67 + 0x24) & 0x00000004) == 0) {
												 *_t74 = _t70;
												E6DB23470();
												E6DB24A20(_t71, _t67, _t70, _t71);
											} else {
												_t46 =  *((intOrPtr*)(_t67 + 0x14));
												 *_t67 = 0xdeadbeef;
												if(_t46 != 0) {
													 *_t74 = _t46;
													CloseHandle(??);
													_t74 = _t74 - 4;
												}
												 *((intOrPtr*)(_t67 + 0x14)) = 0;
												 *_t74 = _t70;
												E6DB23470();
												_t48 = _t71;
												goto L15;
											}
										}
									} else {
										_t57 =  *((intOrPtr*)(_t35 + 0xb4));
										if( *((intOrPtr*)(_t35 + 0xb4)) != 0) {
											E6DB24C60(_t57);
										}
										_t58 =  *((intOrPtr*)(_t67 + 0x14));
										if(_t58 != 0) {
											 *_t74 = _t58;
											_t71 =  *0x6db2f184;
											CloseHandle(??);
											_t62 =  *((intOrPtr*)(_t67 + 0x18));
											_t74 = _t74 - 4;
											if(_t62 != 0) {
												 *_t74 = _t62;
												CloseHandle(??);
												_t74 = _t74 - 4;
											}
											 *((intOrPtr*)(_t67 + 0x18)) = 0;
											 *((intOrPtr*)(_t67 + 0x14)) = 0;
										}
										_t11 = _t67 + 0x1c; // 0x1c
										 *_t74 = _t11;
										E6DB23470();
										_t12 = _t67 + 0x38; // 0x38
										_t48 = _t12;
										L15:
										E6DB24A20(_t48, _t67, _t70, _t71);
										E6DB24650(_t67);
										_v24 = 0;
										 *_t74 =  *0x6db2a020;
										TlsSetValue(??, ??);
										_t74 = _t74 - 8;
									}
								}
							}
						}
						goto L2;
					}
				} else {
					if(_a12 == 0) {
						_t65 =  *0x6db2c02c;
						if(_t65 != 0) {
							 *_t74 = _t65;
							 *0x6db2f1fc();
							 *0x6db2c02c = 0;
							_t74 = _t74 - 4;
						}
					}
					L2:
					return 1;
				}
			}

0x6db24d63
0x6db24d66
0x6db24d6c
0x6db24d93
0x6db24e70
0x6db24e78
0x6db24e7f
0x6db24e88
0x6db24e98
0x6db24d99
0x6db24d9c
0x6db24d9e
0x6db24da6
0x6db24da8
0x6db24dab
0x6db24db1
0x6db24db4
0x6db24db8
0x6db24dbe
0x6db24ea3
0x6db24ea8
0x6db24f1a
0x6db24f1c
0x6db24f1f
0x6db24f25
0x6db24f25
0x6db24f28
0x6db24f2b
0x6db24f32
0x6db24f35
0x6db24f3a
0x6db24f3d
0x6db24eaa
0x6db24eac
0x6db24eae
0x6db24eb1
0x6db24eb7
0x6db24eb7
0x6db24eba
0x6db24ec0
0x6db24ec7
0x6db24ed0
0x6db24ed2
0x6db24ed2
0x6db24ed7
0x6db24ed7
0x6db24eda
0x6db24eda
0x6db24ee1
0x6db24f50
0x6db24f53
0x6db24f5a
0x6db24ee3
0x6db24ee3
0x6db24ee6
0x6db24eee
0x6db24ef0
0x6db24ef3
0x6db24ef9
0x6db24ef9
0x6db24efc
0x6db24f03
0x6db24f06
0x6db24f0b
0x00000000
0x6db24f0b
0x6db24ee1
0x6db24dc4
0x6db24dc4
0x6db24dcc
0x6db24dce
0x6db24dce
0x6db24dd3
0x6db24dd8
0x6db24dda
0x6db24ddd
0x6db24de3
0x6db24de5
0x6db24de8
0x6db24ded
0x6db24def
0x6db24df2
0x6db24df4
0x6db24df4
0x6db24df7
0x6db24dfe
0x6db24dfe
0x6db24e05
0x6db24e08
0x6db24e0b
0x6db24e10
0x6db24e10
0x6db24e13
0x6db24e13
0x6db24e1a
0x6db24e24
0x6db24e2c
0x6db24e2f
0x6db24e35
0x6db24e35
0x6db24dbe
0x6db24db8
0x6db24da6
0x00000000
0x6db24d9c
0x6db24d6e
0x6db24d74
0x6db24e40
0x6db24e47
0x6db24e4d
0x6db24e50
0x6db24e56
0x6db24e60
0x6db24e60
0x6db24e47
0x6db24d7a
0x6db24d85
0x6db24d85

APIs

TlsGetValue.KERNEL32 ref: 6DB24DAB
CloseHandle.KERNEL32 ref: 6DB24DE3
CloseHandle.KERNEL32 ref: 6DB24DF2
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB24E0B
TlsSetValue.KERNEL32 ref: 6DB24E2F
RtlRemoveVectoredExceptionHandler.NTDLL ref: 6DB24E50

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CloseHandleValue$ExceptionHandlerRemoveVectoredpthread_mutex_destroy
String ID:
API String ID: 277988988-0
Opcode ID: 2ca909d3bcaf52324ea8f765e5f9171f77f0b3a232eb825de77ba4188801e7e4
Instruction ID: fa107d3876b351eb0768593702b819f27c639cc4b10e05e45a1083ea3ff56bab
Opcode Fuzzy Hash: 2ca909d3bcaf52324ea8f765e5f9171f77f0b3a232eb825de77ba4188801e7e4
Instruction Fuzzy Hash: 6C418FB26042418BEB01EF39D58973A7BF4EF19344F424568D899CB74DEB38D854CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24E68 Relevance: 1.5, APIs: 1, Instructions: 13
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAddVectoredExceptionHandler.NTDLL ref: 6DB24E7F

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ExceptionHandlerVectored
String ID:
API String ID: 3310709589-0
Opcode ID: 964990d9134a456a7be78efb361b8879510963027ec9d5d909589e09f14d96a3
Instruction ID: 28264d0ff715b8d44aea1a7d62ce914beaba357252ce3a2221b682eb1d748a6e
Opcode Fuzzy Hash: 964990d9134a456a7be78efb361b8879510963027ec9d5d909589e09f14d96a3
Instruction Fuzzy Hash: 3ED0C9B39042008FE700AF6CE9057AEBBB0F75A312F82492ED48A97248E37554948F96

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 6DB27E60 Relevance: 7.6, APIs: 5, Instructions: 55COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 6DB27EAF
UnhandledExceptionFilter.KERNEL32 ref: 6DB27EBF
GetCurrentProcess.KERNEL32 ref: 6DB27EC8
TerminateProcess.KERNEL32 ref: 6DB27ED9
abort.MSVCRT ref: 6DB27EE2

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentTerminateabort
String ID:
API String ID: 520269711-0
Opcode ID: f71e2ebe75d340546c472c01d3e8e9ec4332ac24b89cae89a914941968cb6475
Instruction ID: 6af0a9b1d9b3925a943e101495377bbec49422ac2a1f2bcdb510ce5c5f08fa6e
Opcode Fuzzy Hash: f71e2ebe75d340546c472c01d3e8e9ec4332ac24b89cae89a914941968cb6475
Instruction Fuzzy Hash: C811B6B6904344CFDB00EF69C14676ABBF0BB4A305F42892DE98997308E774D954CF96

Uniqueness

Uniqueness Score: -1.00%

Function 6DB27E5C Relevance: 7.5, APIs: 5, Instructions: 47COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 6DB27EAF
UnhandledExceptionFilter.KERNEL32 ref: 6DB27EBF
GetCurrentProcess.KERNEL32 ref: 6DB27EC8
TerminateProcess.KERNEL32 ref: 6DB27ED9
abort.MSVCRT ref: 6DB27EE2

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentTerminateabort
String ID:
API String ID: 520269711-0
Opcode ID: bd67453fcee6c6af174ebe445e16cd8f8ce0faa0fe171044378953b68d216c9e
Instruction ID: 172fdecbb60e23559672aa9d4db9742d47824bf4d283e0de60c71678b1deedf4
Opcode Fuzzy Hash: bd67453fcee6c6af174ebe445e16cd8f8ce0faa0fe171044378953b68d216c9e
Instruction Fuzzy Hash: 3311C5B6904244CFDB00EF69D54A7697BF0BB0A305F428929E94A97208E7749944CF96

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24F70 Relevance: 28.6, APIs: 19, Instructions: 115
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB24F95
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB24F9D
TlsSetValue.KERNEL32 ref: 6DB24FBF
GetCurrentThreadId.KERNEL32 ref: 6DB24FC7
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB24FD3
_setjmp3.MSVCRT ref: 6DB24FE6
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB24FFA
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB25008
CloseHandle.KERNEL32 ref: 6DB2501C
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB2503A
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB25042
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB25065
Sleep.KERNEL32(00000000), ref: 6DB25079
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB25085
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB250A5
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB250DB
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB250E3
TlsSetValue.KERNEL32 ref: 6DB250FF
_endthreadex.MSVCRT ref: 6DB2510F

Part of subcall function 6DB24990: pthread_mutex_lock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB249A8
Part of subcall function 6DB24990: pthread_tls_init.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB249B7
Part of subcall function 6DB24990: pthread_mutex_unlock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB249C9

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_lockpthread_mutex_unlock$Valuepthread_mutex_destroy$CloseCurrentHandleSleepThread_endthreadex_setjmp3pthread_tls_init
String ID:
API String ID: 3376602310-0
Opcode ID: 79d75674e4f541bee844b49f952bb54598d3fe4f6c9607253429f9de250aaf19
Instruction ID: 655ccfe6ba51d25c0fb2f53885192af08e29419cc6ce8ff3b8873db87126bb9c
Opcode Fuzzy Hash: 79d75674e4f541bee844b49f952bb54598d3fe4f6c9607253429f9de250aaf19
Instruction Fuzzy Hash: DB4106B29087418FCB10AF65C884A7EBBF4FF49304F02891CE9999B349D735A845CF96

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25CA0 Relevance: 24.1, APIs: 16, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6DB25CB4

Part of subcall function 6DB24C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C36
Part of subcall function 6DB24C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C4B

GetHandleInformation.KERNEL32 ref: 6DB25CDD
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB25CF4

Part of subcall function 6DB24AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6DB25ADA,?,?,?,?,6DB26ADD), ref: 6DB24AED

SetEvent.KERNEL32 ref: 6DB25D42
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB25D4E
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB25DDB

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$pthread_mutex_lock$EventHandleInformationValue__pth_gpointer_locked
String ID:
API String ID: 1371553515-0
Opcode ID: a2460c42db95bdbfd5f5343f1c910f14e5b988fb7ed1d5079da4158987e1accc
Instruction ID: cd10cdfbda4be64a05fb3b4be6489b7eb9f8e0fb020dfabe19dd7d04c175d6a9
Opcode Fuzzy Hash: a2460c42db95bdbfd5f5343f1c910f14e5b988fb7ed1d5079da4158987e1accc
Instruction Fuzzy Hash: 0D51BCB35082818BCB00AF3AD589A7A7FF0EF46364F120A5CEC998B24DD734D445CB56

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25AD0 Relevance: 19.6, APIs: 13, Instructions: 105
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 71%

			E6DB25AD0(void* __ecx, void* __edi, void* __ebp, void* __eflags) {
				signed int _v24;
				signed int _v52;
				void* __ebx;
				void* __esi;
				intOrPtr _t19;
				signed int _t21;
				signed int _t25;
				signed int _t28;
				void* _t36;
				signed int _t38;
				void* _t45;
				intOrPtr _t46;
				signed int _t47;
				signed int _t50;
				void* _t53;
				signed int _t54;
				void* _t56;
				void* _t57;
				void* _t58;
				signed int* _t59;
				signed int* _t62;

				_t57 = __ebp;
				_t52 = __edi;
				_t59 = _t58 - 0x14;
				_t19 = E6DB24AD0(_t45, __ecx, __edi, _t53);
				if(_t19 == 0) {
					L3:
					return _t19;
				} else {
					_t46 = _t19;
					if(( *(_t19 + 0x20) & 0x0000000c) != 0) {
						goto L3;
					} else {
						_t19 =  *0x6db2c058;
						if(_t19 != 0) {
							_t4 = _t46 + 0x1c; // 0x1c
							_t54 = _t4;
							 *_t59 = _t54;
							E6DB22F90();
							_t21 =  *(_t46 + 0x20) & 0x000000ff;
							__eflags = _t21 & 0x00000003;
							if((_t21 & 0x00000003) == 0) {
								L7:
								 *_t59 = _t54;
								return E6DB232E0();
							} else {
								_t50 =  *(_t46 + 0x24);
								__eflags = _t50 & 0x00000001;
								if((_t50 & 0x00000001) == 0) {
									goto L7;
								} else {
									_t49 =  *(_t46 + 0x10);
									__eflags =  *(_t46 + 0x10);
									if( *(_t46 + 0x10) <= 0) {
										 *(_t46 + 0x24) = _t50 & 0xfffffffe;
										 *(_t46 + 0x20) = _t21 & 0xfffffff3 | 0x00000004;
										_t25 =  *(_t46 + 0x18);
										__eflags = _t25;
										if(_t25 != 0) {
											 *_t59 = _t25;
											_push(ResetEvent(??));
										}
										 *_t59 = _t54;
										E6DB232E0();
										L6DB25A10(_t49, _t52, _t54, _t57, __eflags);
										_push(_t54);
										_push(_t46);
										_t62 = _t59 - 0x14;
										_t28 = _v24;
										__eflags = _t28;
										if(_t28 == 0) {
											E6DB24AD0(_t46, _t49, _t52, _t54);
											goto L18;
										} else {
											 *_t62 = _t28;
											_t47 = E6DB22CB0();
											__eflags = 0xfffffffe - _t47;
											asm("sbb eax, edx");
											if(0xfffffffe < _t47) {
												_t36 = E6DB24AD0(_t47, _t49, _t52, _t54);
												_t47 = 0xffffffff;
												E6DB25AD0(_t49, _t52, _t57, __eflags);
												_t38 =  *(_t36 + 0x18);
												__eflags = _t38;
												if(__eflags != 0) {
													goto L15;
												} else {
													goto L21;
												}
												goto L16;
											} else {
												_t56 = E6DB24AD0(_t47, _t49, _t52, _t54);
												__eflags = _t47;
												if(__eflags == 0) {
													L18:
													E6DB25AD0(_t49, _t52, _t57, __eflags);
													 *_t62 = 0;
													Sleep(??);
													E6DB25AD0(_t49, _t52, _t57, __eflags);
													__eflags = 0;
													return 0;
												} else {
													E6DB25AD0(_t49, _t52, _t57, __eflags);
													_t38 =  *(_t56 + 0x18);
													__eflags = _t38;
													if(__eflags == 0) {
														L21:
														 *_t62 = _t47;
														Sleep(??);
														_t62 = _t62 - 4;
													} else {
														L15:
														_v52 = _t47;
														 *_t62 = _t38;
														E6DB22DC0();
													}
													L16:
													E6DB25AD0(_t49, _t52, _t57, __eflags);
													__eflags = 0;
													return 0;
												}
											}
										}
									} else {
										goto L7;
									}
								}
							}
						} else {
							goto L3;
						}
					}
				}
			}

0x6db25ad0
0x6db25ad0
0x6db25ad2
0x6db25ad5
0x6db25adc
0x6db25aef
0x6db25af4
0x6db25ade
0x6db25ade
0x6db25ae4
0x00000000
0x6db25ae6
0x6db25ae6
0x6db25aed
0x6db25af8
0x6db25af8
0x6db25afb
0x6db25afe
0x6db25b03
0x6db25b07
0x6db25b09
0x6db25b1a
0x6db25b1a
0x6db25b27
0x6db25b0b
0x6db25b0b
0x6db25b0e
0x6db25b11
0x00000000
0x6db25b13
0x6db25b13
0x6db25b16
0x6db25b18
0x6db25b31
0x6db25b34
0x6db25b37
0x6db25b3a
0x6db25b3c
0x6db25b3e
0x6db25b47
0x6db25b47
0x6db25b48
0x6db25b4b
0x6db25b50
0x6db25b60
0x6db25b61
0x6db25b62
0x6db25b65
0x6db25b69
0x6db25b6b
0x6db25bc0
0x00000000
0x6db25b6d
0x6db25b6d
0x6db25b75
0x6db25b7c
0x6db25b83
0x6db25b85
0x6db25bf0
0x6db25bf5
0x6db25bfc
0x6db25c01
0x6db25c04
0x6db25c06
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x6db25b87
0x6db25b8c
0x6db25b8e
0x6db25b90
0x6db25bc5
0x6db25bc5
0x6db25bca
0x6db25bd1
0x6db25bda
0x6db25be2
0x6db25be6
0x6db25b92
0x6db25b92
0x6db25b97
0x6db25b9a
0x6db25b9c
0x6db25c10
0x6db25c10
0x6db25c13
0x6db25c19
0x6db25b9e
0x6db25b9e
0x6db25b9e
0x6db25ba2
0x6db25ba5
0x6db25ba5
0x6db25baa
0x6db25baa
0x6db25bb2
0x6db25bb6
0x6db25bb6
0x6db25b90
0x6db25b85
0x00000000
0x00000000
0x00000000
0x6db25b18
0x6db25b11
0x00000000
0x00000000
0x00000000
0x6db25aed
0x6db25ae4

APIs

Part of subcall function 6DB24AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6DB25ADA,?,?,?,?,6DB26ADD), ref: 6DB24AED

pthread_mutex_lock.LIBWINPTHREAD-1(?,?,?,?,6DB26ADD), ref: 6DB25AFE
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,6DB26ADD), ref: 6DB25B1D

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Valuepthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 2393744784-0
Opcode ID: 5a225af1bfb0cab16273f79d851a057ae16d8d32cc3e06b02091ea1aa5c234f7
Instruction ID: 599e89de8f1b1335f7d0d7bdd55a25d26d9f7083d13b16797376ad265bc2801e
Opcode Fuzzy Hash: 5a225af1bfb0cab16273f79d851a057ae16d8d32cc3e06b02091ea1aa5c234f7
Instruction Fuzzy Hash: 5131A3B36086814BDB00BF79988577F77E0EF16218F46066CE99EA728DEB20D4418796

Uniqueness

Uniqueness Score: -1.00%

Function 6DB27FF0 Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 124
filememoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

fwrite.MSVCRT ref: 6DB2801F
vfprintf.MSVCRT ref: 6DB2803F
abort.MSVCRT ref: 6DB28044
VirtualQuery.KERNEL32 ref: 6DB280D7
VirtualProtect.KERNEL32 ref: 6DB2812D
GetLastError.KERNEL32 ref: 6DB2813A

Strings

@, xrefs: 6DB2811E
Mingw-w64 runtime failure:, xrefs: 6DB28018
Address %p has no image-section, xrefs: 6DB2817B
VirtualProtect failed with code 0x%x, xrefs: 6DB28140
VirtualQuery failed for %d bytes at address %p, xrefs: 6DB28167

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Virtual$ErrorLastProtectQueryabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$@$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 1616349570-4164700141
Opcode ID: bf3bd74ab1a84037c8626a3a8b0c889dd5c38db921030ad80369e426cf1663ac
Instruction ID: 0af8eea270a05877ed38cedfbd4aacbcd290a0ff256957d77fd48037409732a6
Opcode Fuzzy Hash: bf3bd74ab1a84037c8626a3a8b0c889dd5c38db921030ad80369e426cf1663ac
Instruction Fuzzy Hash: 7F4145B69083418BC700DF29C485A6EBBF0FF89314F42892DE99C9B25CE734E5448B92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24AD0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 97
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 16%

			E6DB24AD0(void* __ebx, signed char __ecx, void* __edi, void* __esi) {
				void* _t76;
				void* _t81;
				void* _t86;
				signed int _t87;
				signed char _t90;
				signed char _t91;
				signed int _t93;
				signed int _t97;
				signed char _t98;
				signed char _t102;
				int _t106;
				int _t111;
				void* _t115;
				void* _t117;
				signed char _t124;
				void* _t125;
				signed char _t126;
				signed int* _t129;
				void* _t130;
				signed int _t133;
				signed int _t138;
				void* _t143;
				intOrPtr* _t144;
				signed char** _t145;
				void** _t147;
				signed int _t148;
				intOrPtr* _t149;

				_t127 = __edi;
				_t124 = __ecx;
				_push(__edi);
				_t144 = _t143 - 0x2c;
				_t151 =  *0x6db2c050 - 1;
				if( *0x6db2c050 != 1) {
					E6DB24990(__ecx, _t125, _t151);
				}
				 *_t144 =  *0x6db2a020;
				_t76 = TlsGetValue(??);
				_t145 = _t144 - 4;
				_t115 = _t76;
				if(_t76 == 0) {
					_t133 = E6DB248D0(__eflags);
					__eflags =  *0x6db30020;
					if( *0x6db30020 == 0) {
						goto L3;
					} else {
						__eflags = _t133;
						if(_t133 == 0) {
							goto L3;
						} else {
							 *(_t133 + 0x24) = 1;
							 *((intOrPtr*)(_t133 + 0x3c)) = GetCurrentThreadId();
							_t145[3] = 0;
							_t145[2] = 0;
							_t145[1] = 1;
							 *_t145 = 0;
							_t81 = CreateEventA(??, ??, ??, ??);
							 *((intOrPtr*)(_t133 + 0x1c)) = 0xffffffff;
							 *(_t133 + 0x18) = _t81;
							_t147 = _t145 - 0x10;
							_t8 = _t133 + 0x38; // 0x38
							E6DB24A20(_t8, _t115, _t127, _t133);
							_t138 =  *0x6db2f1a0;
							 *(_t133 + 0x64) = 0;
							 *(_t133 + 0x14) = 0;
							_t129 = GetCurrentProcess();
							_t117 = GetCurrentThread();
							_t86 = GetCurrentProcess();
							_t11 = _t133 + 0x14; // 0x14
							_t126 = _t11;
							_t147[2] = _t129;
							_t147[6] = 2;
							_t147[5] = 0;
							_t147[4] = 0;
							_t147[3] = _t126;
							_t147[1] = _t117;
							 *_t147 = _t86;
							_t87 = DuplicateHandle(??, ??, ??, ??, ??, ??, ??);
							_t148 = _t147 - 0x1c;
							__eflags = _t87;
							if(_t87 == 0) {
								L9:
								abort();
								asm("ud2");
								 *0 =  *(_t148 + 0x1c);
								asm("ud2");
								_t90 = _t148 + 0x14;
								 *0 = _t90;
								asm("ud2");
								asm("invalid");
								asm("invalid");
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								asm("invalid");
								asm("invalid");
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								 *_t90 =  *_t90 + _t90;
								__eflags =  *_t90;
								asm("das");
								if(__eflags <= 0) {
									L28:
									asm("bound esp, [ecx+0x72]");
									if(__eflags < 0) {
										goto L50;
									} else {
										goto L29;
									}
								} else {
									if(__eflags < 0) {
										L17:
										asm("popad");
										if(__eflags < 0) {
											goto L38;
										} else {
											if (__eflags >= 0) goto L29;
											goto L19;
										}
									} else {
										if(__eflags == 0) {
											L31:
											__eflags = _t91 - 0x494c203d;
											goto L32;
										} else {
											if(__eflags < 0) {
												L19:
												if(__eflags >= 0) {
													L29:
													if(__eflags < 0) {
														goto L36;
													} else {
														_t91 = _t90 - 0x6c61763e;
														_t148 =  *(_t91 + 0x3d) * 0x494c203d;
														__eflags = _t148;
														goto L31;
													}
												} else {
													if(__eflags > 0) {
														if(__eflags >= 0) {
															 *[gs:0x6c202c73] =  *[gs:0x6c202c73] & _t90;
															__eflags =  *[gs:0x6c202c73];
															goto L49;
														} else {
															 *[ds:eax] =  *[ds:eax] & _t126;
															 *_t90 =  *_t90 - _t90;
															_t124 =  &(1[_t124]);
															__eflags = _t124;
															if(__eflags >= 0) {
																goto L63;
															} else {
																if(__eflags < 0) {
																	goto L64;
																} else {
																	_t138 = _t129[0x1b] * 0x69616620;
																	__eflags = _t138;
																	goto L43;
																}
															}
														}
													} else {
														asm("outsb");
														if(__eflags < 0) {
															L43:
															asm("outsd");
															asm("outsb");
															goto L44;
														} else {
															_push(0x64616572);
															if(__eflags >= 0) {
																L32:
																__eflags = _t91 - 0x46494c20;
																_t138 =  &(1[_t138]);
																_pop(_t129);
																_t126 =  &(1[_t126]);
																_t124 =  &(1[_t124]);
																__eflags = _t124;
																_push(_t126);
																_push(_t126);
																goto L33;
															} else {
																if(__eflags >= 0) {
																	L46:
																	__eflags = _t90 -  *[fs:eax];
																	 *0x202c2973 =  *0x202c2973 - _t90;
																	__eflags =  *0x202c2973;
																} else {
																	asm("arpl [edi], bp");
																	asm("bound esp, [ecx+0x72]");
																	if(__eflags < 0) {
																		L45:
																		_t138 =  *(_t138 + 0x64) * 0x2528203a;
																		__eflags = _t138;
																		goto L46;
																	} else {
																		if(__eflags < 0) {
																			L33:
																			_t124 = _t124 - 1;
																			_t138 =  &(1[_t138]);
																			_push(_t126);
																			 *_t91 =  *_t91 - _t148;
																			 *[es:eax] =  *[es:eax] & _t124;
																			 *_t91 =  *_t91 - _t124;
																			__eflags =  *_t91;
																			asm("bound esp, [ecx+0x72]");
																			if(__eflags < 0) {
																				goto L54;
																			} else {
																				if(__eflags < 0) {
																					goto L53;
																				} else {
																					if(__eflags == 0) {
																						L44:
																						_t38 = _t133 + 0x61;
																						 *_t38 =  *(_t133 + 0x61) & _t90;
																						__eflags =  *_t38;
																						goto L45;
																					} else {
																						L36:
																						_t124 = _t124 -  *_t124;
																						_t91 = _t90 -  *(_t126 + 0x61);
																						__eflags = _t91;
																						if(__eflags < 0) {
																							goto L60;
																						} else {
																							_t148 =  *(_t138 + 0x72) * 0x623e2d29;
																							__eflags = _t148;
																							L38:
																							_t90 = _t91 - 0x7375623e;
																							__eflags = _t90;
																						}
																					}
																				}
																			}
																		} else {
																			asm("arpl [eax], ax");
																			 *_t90 =  *_t90 - _t124;
																			_t31 = _t126 + 0x61;
																			 *_t31 =  *(_t126 + 0x61) - _t90;
																			__eflags =  *_t31;
																			if( *_t31 < 0) {
																				L49:
																				asm("insb");
																				_t138 =  *(_t133 + 0x65) * 0xa642520;
																				__eflags = _t138;
																				L50:
																				_t91 = _t90 & 0x00000a64;
																				_t43 = _t117 + 0x25;
																				 *_t43 =  *(_t117 + 0x25) + _t91;
																				__eflags =  *_t43;
																				if(__eflags < 0) {
																					L55:
																					asm("das");
																					if(__eflags <= 0) {
																						goto L81;
																					} else {
																						if(__eflags < 0) {
																							goto L68;
																						} else {
																							if(__eflags == 0) {
																								goto L85;
																							} else {
																								goto L58;
																							}
																						}
																					}
																				} else {
																					_t117 = _t117 + 1;
																					_t91 = (_t91 & 0x73252064 |  *(_t91 & 0x73252064)) & 0x64252070;
																					_t45 = _t133 + 0x3d;
																					 *_t45 =  *(_t133 + 0x3d) & _t126;
																					__eflags =  *_t45;
																					__eflags = _t91 - 0x20583025;
																					if(__eflags > 0) {
																						L67:
																						if (__eflags < 0) goto L90;
																						L68:
																						asm("popad");
																					} else {
																						L53:
																						_t91 = _t91 & 0x2520646c;
																						__eflags = _t91;
																						if(__eflags >= 0) {
																							L58:
																							if(__eflags < 0) {
																								if(__eflags >= 0) {
																									goto L83;
																								} else {
																									if(__eflags > 0) {
																										goto L93;
																									} else {
																										asm("outsb");
																										if(__eflags < 0) {
																											goto L98;
																										} else {
																											_push(0x64616572);
																											if(__eflags >= 0) {
																												goto L86;
																											} else {
																												if(__eflags >= 0) {
																													_t91 = _t91 - 0x20;
																													__eflags = _t91;
																													goto L100;
																												} else {
																													asm("arpl [edi], bp");
																													if(__eflags < 0) {
																														goto L101;
																													} else {
																														asm("insb");
																														goto L78;
																													}
																												}
																											}
																										}
																									}
																								}
																							} else {
																								asm("bound esi, [ebp+0x69]");
																								asm("insb");
																								asm("das");
																								asm("insd");
																								_t138 =  *(_t133 + 0x67) * 0x36772d77;
																								__eflags = _t138;
																								L60:
																								asm("a16 ja 0x30");
																								if(__eflags > 0) {
																									L78:
																									asm("outsd");
																									asm("arpl [ebx+0x2e], bp");
																									asm("arpl [eax], ax");
																									 *_t91 =  *_t91 + _t124;
																									 *_t91 =  *_t91 - _t124;
																									__eflags =  *_t91;
																									if(__eflags < 0) {
																										goto L103;
																									} else {
																										goto L79;
																									}
																								} else {
																									_t98 = _t91 ^ 0x0000002d;
																									_t48 = _t124 + 0x31;
																									 *_t48 =  *(_t124 + 0x31) ^ _t98;
																									__eflags =  *_t48;
																									_t91 = _t98 ^ 0x6438370d;
																									__eflags =  *_t129 - _t124;
																									L63:
																									asm("insd");
																									_t138 =  *(_t133 + 0x67) * 0x36772d77;
																									__eflags = _t138;
																									L64:
																									if(__eflags > 0) {
																										L79:
																										asm("insb");
																										asm("outsd");
																										asm("arpl [ebx+0x5f], bp");
																										if(__eflags == 0) {
																											goto L87;
																										} else {
																											_t124 = _t124 -  *_t124;
																											_t126 = _t126 -  *((intOrPtr*)(_t126 + 0x77));
																											__eflags = _t126;
																											goto L81;
																										}
																									} else {
																										if(__eflags > 0) {
																											L81:
																											if(__eflags > 0) {
																												L104:
																												if(__eflags >= 0) {
																													 *((intOrPtr*)(_t126 + 0x57)) =  *((intOrPtr*)(_t126 + 0x57)) + _t126;
																													_t148 = _t148 - 1;
																													_t97 = (_t91 & 0x73252064 |  *(_t91 & 0x73252064)) & 0x64252070;
																													__eflags = _t97;
																													 *[fs:esi+0x3d] =  *[fs:esi+0x3d] & _t126;
																													_t91 = _t97 & 0x42205830;
																													_t91 - 0x72206425 = _t91 - 0x20646c25;
																												}
																												 *[fs:edi+0x3d] =  *[fs:edi+0x3d] & _t126;
																												__eflags =  *[fs:edi+0x3d];
																											} else {
																												 *0x6c61763e =  *0x6c61763e - _t138;
																												__eflags =  *0x6c61763e;
																												L83:
																												if(__eflags <= 0) {
																													L102:
																													_t91 = _t91 |  *_t91;
																													__eflags = _t91;
																													_push(_t126);
																													_push(_t129);
																													L103:
																													_t148 = _t148 - 1;
																													_t91 = _t91 & 0x64252070;
																													__eflags = _t91;
																													goto L104;
																												} else {
																													asm("insb");
																													_t148 =  *(_t91 + 0x3d) * 0x494c203d;
																													__eflags = _t148;
																													L85:
																													_t133 =  &(1[_t133]);
																													__eflags = _t133;
																													L86:
																													_t138 =  &(1[_t138]);
																													_pop(_t130);
																													_push(_t126);
																													_push(_t130);
																													_t148 = _t148 - 1;
																													_t129 = _t130 - 1;
																													 *_t91 =  *_t91 - _t148;
																													 *[es:eax] =  *[es:eax] & _t124;
																													__eflags =  *[es:eax];
																													L87:
																													 *[es:eax] =  *[es:eax] & _t124;
																													 *_t91 =  *_t91 - _t124;
																													__eflags =  *_t91;
																													if(__eflags < 0) {
																														_t93 = _t91 & 0x73252070 |  *(_t91 & 0x73252070);
																														__eflags = _t93;
																													} else {
																														asm("insb");
																														asm("outsd");
																														asm("arpl [ebx+0x5f], bp");
																														if(__eflags == 0) {
																															L97:
																															asm("popa");
																															_t138 =  *(_t138 + 0x64) * 0x2528203a;
																															__eflags = _t138;
																															L98:
																															__eflags = _t91 -  *[fs:eax];
																															 *0x202c2973 =  *0x202c2973 - _t91;
																															__eflags =  *0x202c2973;
																														} else {
																															_t124 = _t124 -  *_t124;
																															_t126 = _t126 -  *((intOrPtr*)(_t126 + 0x77));
																															asm("insb");
																															 *0x7375623e =  *0x7375623e - _t138;
																															__eflags =  *0x7375623e;
																															asm("bound esi, [ds:ebp+0x73]");
																															if(__eflags >= 0) {
																																L100:
																																__eflags =  *(_t138 + 0x20) * 0x7325;
																																L101:
																																_t91 = _t91 - 0x20;
																																asm("insb");
																																_t138 =  *(_t133 + 0x65) * 0xa642520;
																																__eflags = _t138;
																																goto L102;
																															} else {
																																 *[ds:eax] =  *[ds:eax] & _t126;
																																 *_t91 =  *_t91 - _t91;
																																__eflags =  *_t91;
																																 *_t91 =  *_t91 + _t91;
																																 *_t91 =  *_t91 + _t91;
																																_t124 =  &(1[_t124]);
																																__eflags = _t124;
																																L93:
																																if(__eflags >= 0) {
																																	_t129[0x1b] = _t129[0x1b] & _t124;
																																	asm("arpl [ebp+0x20], sp");
																																	goto L116;
																																} else {
																																	if (__eflags < 0) goto L116;
																																	if(__eflags < 0) {
																																		L116:
																																		 *[gs:0x73692070] =  *[gs:0x73692070] & _t91;
																																		 *0xa64 =  *0xa64 & _t91;
																																		_t65 = _t138 + 0x72;
																																		 *_t65 =  *(_t138 + 0x72) + _t91;
																																		__eflags =  *_t65;
																																		if (__eflags < 0) goto L129;
																																		asm("outsd");
																																	} else {
																																		_t138 = _t129[0x1b] * 0x69616620;
																																		__eflags = _t138;
																																		goto L97;
																																	}
																																}
																															}
																														}
																													}
																												}
																											}
																										} else {
																											_t91 = _t91 ^ 0x0000002d;
																											asm("insb");
																											_t148 =  *(_t126 + 0x72) * 0x65697261;
																											__eflags = _t148;
																											goto L67;
																										}
																									}
																								}
																							}
																						} else {
																							L54:
																							 *_t91 =  *_t91 + _t91;
																							 *_t129 =  *_t129 + _t124;
																							__eflags =  *_t129;
																							goto L55;
																						}
																					}
																				}
																			} else {
																				_t148 =  *(_t138 + 0x72) * 0x2a20745f;
																				 *_t126 =  *_t126 - _t138;
																				__eflags =  *_t126;
																				goto L28;
																			}
																		}
																	}
																}
															}
														}
													}
												}
											} else {
												asm("bound esi, [ebp+0x69]");
												asm("insb");
												asm("das");
												asm("insd");
												_t102 = _t90 ^ 0x0000002d;
												 *(_t124 + 0x31) =  *(_t124 + 0x31) ^ _t102;
												__eflags =  *_t129 - _t124;
												asm("insd");
												_t138 =  *(_t133 + 0x67) * 0x36772d77;
												_t91 = _t102 ^ 0x64383720;
												asm("insb");
												_t148 =  *(_t126 + 0x72) * 0x65697261;
												__eflags = _t148;
												goto L17;
											}
										}
									}
								}
								_t91 = _t91 |  *_t91;
								__eflags = _t91;
							} else {
								 *_t148 =  *(_t133 + 0x14);
								_t106 = GetThreadPriority(??);
								 *(_t133 + 0x68) = 0;
								 *(_t133 + 0x6c) = _t106;
								_t149 = _t148 - 4;
								 *(_t133 + 0x20) =  *(_t133 + 0x20) & 0xcf | 0x00000010;
								 *(_t149 + 4) = _t133;
								 *_t149 =  *0x6db2a020;
								_t111 = TlsSetValue(??, ??);
								_t148 = _t149 - 8;
								__eflags = _t111;
								if(_t111 == 0) {
									goto L9;
								} else {
									return _t133;
								}
							}
						}
					}
				} else {
					L3:
					return _t115;
				}
			}

0x6db24ad0
0x6db24ad0
0x6db24ad1
0x6db24ad4
0x6db24ad7
0x6db24ade
0x6db24ae0
0x6db24ae0
0x6db24aea
0x6db24aed
0x6db24af3
0x6db24af6
0x6db24afa
0x6db24b15
0x6db24b1c
0x6db24b1e
0x00000000
0x6db24b20
0x6db24b20
0x6db24b22
0x00000000
0x6db24b24
0x6db24b24
0x6db24b31
0x6db24b34
0x6db24b3c
0x6db24b44
0x6db24b4c
0x6db24b53
0x6db24b59
0x6db24b60
0x6db24b63
0x6db24b66
0x6db24b69
0x6db24b6e
0x6db24b74
0x6db24b7b
0x6db24b84
0x6db24b8c
0x6db24b8e
0x6db24b90
0x6db24b90
0x6db24b93
0x6db24b97
0x6db24b9f
0x6db24ba7
0x6db24baf
0x6db24bb3
0x6db24bb7
0x6db24bba
0x6db24bc0
0x6db24bc3
0x6db24bc5
0x6db295c5
0x6db295c5
0x6db295cf
0x6db295d5
0x6db295da
0x6db295dc
0x6db295e0
0x6db295e5
0x6db295e8
0x6db295ea
0x6db295ec
0x6db295ee
0x6db295f0
0x6db295f2
0x6db295f4
0x6db295f6
0x6db295f8
0x6db295fa
0x6db295fc
0x6db295fe
0x6db29600
0x6db29602
0x6db29604
0x6db29606
0x6db29608
0x6db2960a
0x6db2960c
0x6db2960e
0x6db29610
0x6db29612
0x6db29614
0x6db29616
0x6db29618
0x6db2961a
0x6db2961c
0x6db2961e
0x6db29620
0x6db29622
0x6db29624
0x6db29626
0x6db29628
0x6db2962a
0x6db2962c
0x6db2962e
0x6db29630
0x6db29632
0x6db29634
0x6db29636
0x6db29638
0x6db2963a
0x6db2963c
0x6db2963e
0x6db29640
0x6db29642
0x6db29644
0x6db29646
0x6db29648
0x6db2964a
0x6db2964c
0x6db2964e
0x6db29650
0x6db29652
0x6db29654
0x6db29656
0x6db29658
0x6db2965a
0x6db2965c
0x6db2965e
0x6db29660
0x6db29662
0x6db29664
0x6db29666
0x6db29668
0x6db2966a
0x6db2966c
0x6db2966e
0x6db29670
0x6db29672
0x6db29674
0x6db29676
0x6db29678
0x6db2967a
0x6db2967c
0x6db2967e
0x6db29680
0x6db29682
0x6db29684
0x6db29686
0x6db29688
0x6db2968a
0x6db2968c
0x6db2968e
0x6db29690
0x6db29692
0x6db29694
0x6db29696
0x6db29698
0x6db2969a
0x6db2969c
0x6db2969e
0x6db296a0
0x6db296a2
0x6db296a4
0x6db296a6
0x6db296a8
0x6db296aa
0x6db296ac
0x6db296ae
0x6db296b0
0x6db296b2
0x6db296b4
0x6db296b6
0x6db296b8
0x6db296ba
0x6db296bc
0x6db296be
0x6db296c0
0x6db296c2
0x6db296c4
0x6db296c6
0x6db296c8
0x6db296ca
0x6db296cc
0x6db296ce
0x6db296d0
0x6db296d2
0x6db296d4
0x6db296d6
0x6db296d8
0x6db296da
0x6db296dc
0x6db296de
0x6db296e0
0x6db296e2
0x6db296e4
0x6db296e6
0x6db296e8
0x6db296ea
0x6db296ec
0x6db296ee
0x6db296f0
0x6db296f2
0x6db296f4
0x6db296f6
0x6db296f8
0x6db296fa
0x6db296fc
0x6db296fe
0x6db29700
0x6db29702
0x6db29704
0x6db29706
0x6db29708
0x6db2970a
0x6db2970c
0x6db2970e
0x6db29710
0x6db29712
0x6db29714
0x6db29716
0x6db29718
0x6db2971a
0x6db2971c
0x6db2971e
0x6db29720
0x6db29722
0x6db29724
0x6db29726
0x6db29728
0x6db2972a
0x6db2972c
0x6db2972e
0x6db29730
0x6db29732
0x6db29734
0x6db29736
0x6db29738
0x6db2973a
0x6db2973c
0x6db2973e
0x6db29740
0x6db29742
0x6db29744
0x6db29746
0x6db29748
0x6db2974a
0x6db2974c
0x6db2974e
0x6db29750
0x6db29752
0x6db29754
0x6db29756
0x6db29758
0x6db2975a
0x6db2975c
0x6db2975e
0x6db29760
0x6db29762
0x6db29764
0x6db29766
0x6db29768
0x6db2976a
0x6db2976c
0x6db2976e
0x6db29770
0x6db29772
0x6db29774
0x6db29776
0x6db29778
0x6db2977a
0x6db2977c
0x6db2977e
0x6db29780
0x6db29782
0x6db29784
0x6db29786
0x6db29788
0x6db2978a
0x6db2978c
0x6db2978e
0x6db29790
0x6db29792
0x6db29794
0x6db29796
0x6db29798
0x6db2979a
0x6db2979c
0x6db2979e
0x6db297a0
0x6db297a2
0x6db297a4
0x6db297a6
0x6db297a8
0x6db297aa
0x6db297ac
0x6db297ae
0x6db297b0
0x6db297b2
0x6db297b4
0x6db297b6
0x6db297b8
0x6db297ba
0x6db297bc
0x6db297be
0x6db297c0
0x6db297c2
0x6db297c4
0x6db297c6
0x6db297c8
0x6db297ca
0x6db297cc
0x6db297ce
0x6db297d0
0x6db297d2
0x6db297d4
0x6db297d6
0x6db297d8
0x6db297da
0x6db297dc
0x6db297de
0x6db297e0
0x6db297e2
0x6db297e4
0x6db297e6
0x6db297e8
0x6db297ea
0x6db297ec
0x6db297ee
0x6db297f0
0x6db297f2
0x6db297f4
0x6db297f6
0x6db297f8
0x6db297fa
0x6db297fc
0x6db297fe
0x6db29800
0x6db29802
0x6db29804
0x6db29806
0x6db29808
0x6db2980a
0x6db2980c
0x6db2980e
0x6db29810
0x6db29812
0x6db29814
0x6db29816
0x6db29818
0x6db2981a
0x6db2981c
0x6db2981e
0x6db29820
0x6db29822
0x6db29824
0x6db29826
0x6db29828
0x6db2982a
0x6db2982c
0x6db2982e
0x6db29830
0x6db29832
0x6db29834
0x6db29836
0x6db29838
0x6db2983a
0x6db2983c
0x6db2983e
0x6db29840
0x6db29842
0x6db29844
0x6db29846
0x6db29848
0x6db2984a
0x6db2984c
0x6db2984e
0x6db29850
0x6db29852
0x6db29854
0x6db29856
0x6db29858
0x6db2985a
0x6db2985c
0x6db2985e
0x6db29860
0x6db29862
0x6db29864
0x6db29866
0x6db29868
0x6db2986a
0x6db2986c
0x6db2986e
0x6db29870
0x6db29872
0x6db29874
0x6db29876
0x6db29878
0x6db2987a
0x6db2987c
0x6db2987e
0x6db29880
0x6db29882
0x6db29884
0x6db29886
0x6db29888
0x6db2988a
0x6db2988c
0x6db2988e
0x6db29890
0x6db29892
0x6db29894
0x6db29896
0x6db29898
0x6db2989a
0x6db2989c
0x6db2989e
0x6db298a0
0x6db298a2
0x6db298a4
0x6db298a6
0x6db298a8
0x6db298aa
0x6db298ac
0x6db298ae
0x6db298b0
0x6db298b2
0x6db298b4
0x6db298b6
0x6db298b8
0x6db298ba
0x6db298bc
0x6db298be
0x6db298c0
0x6db298c2
0x6db298c4
0x6db298c6
0x6db298c8
0x6db298ca
0x6db298cc
0x6db298ce
0x6db298d0
0x6db298d2
0x6db298d4
0x6db298d6
0x6db298d8
0x6db298da
0x6db298dc
0x6db298de
0x6db298e0
0x6db298e2
0x6db298e4
0x6db298e6
0x6db298e8
0x6db298ea
0x6db298ec
0x6db298ee
0x6db298f0
0x6db298f2
0x6db298f4
0x6db298f6
0x6db298f8
0x6db298fa
0x6db298fc
0x6db298fe
0x6db29900
0x6db29902
0x6db29904
0x6db29906
0x6db29908
0x6db2990a
0x6db2990c
0x6db2990e
0x6db29910
0x6db29912
0x6db29914
0x6db29916
0x6db29918
0x6db2991a
0x6db2991c
0x6db2991e
0x6db29920
0x6db29922
0x6db29924
0x6db29926
0x6db29928
0x6db2992a
0x6db2992c
0x6db2992e
0x6db29930
0x6db29932
0x6db29934
0x6db29936
0x6db29938
0x6db2993a
0x6db2993c
0x6db2993e
0x6db29940
0x6db29942
0x6db29944
0x6db29946
0x6db29948
0x6db2994a
0x6db2994c
0x6db2994e
0x6db29950
0x6db29952
0x6db29954
0x6db29956
0x6db29958
0x6db2995a
0x6db2995c
0x6db2995e
0x6db29960
0x6db29962
0x6db29964
0x6db29966
0x6db29968
0x6db2996a
0x6db2996c
0x6db2996e
0x6db29970
0x6db29972
0x6db29974
0x6db29976
0x6db29978
0x6db2997a
0x6db2997c
0x6db2997e
0x6db29980
0x6db29982
0x6db29984
0x6db29986
0x6db29988
0x6db2998a
0x6db2998c
0x6db2998e
0x6db29990
0x6db29992
0x6db29994
0x6db29996
0x6db29998
0x6db2999a
0x6db2999c
0x6db2999e
0x6db299a0
0x6db299a2
0x6db299a4
0x6db299a6
0x6db299a8
0x6db299aa
0x6db299ac
0x6db299ae
0x6db299b0
0x6db299b2
0x6db299b4
0x6db299b6
0x6db299b8
0x6db299ba
0x6db299bc
0x6db299be
0x6db299c0
0x6db299c2
0x6db299c4
0x6db299c6
0x6db299c8
0x6db299ca
0x6db299cc
0x6db299ce
0x6db299d0
0x6db299d2
0x6db299d4
0x6db299d6
0x6db299d8
0x6db299da
0x6db299dc
0x6db299de
0x6db299e0
0x6db299e2
0x6db299e4
0x6db299e6
0x6db299e8
0x6db299ea
0x6db299ec
0x6db299ee
0x6db299f0
0x6db299f2
0x6db299f4
0x6db299f6
0x6db299f8
0x6db299fa
0x6db299fc
0x6db299fe
0x6db29a00
0x6db29a02
0x6db29a04
0x6db29a06
0x6db29a08
0x6db29a0a
0x6db29a0c
0x6db29a0e
0x6db29a10
0x6db29a12
0x6db29a14
0x6db29a16
0x6db29a18
0x6db29a1a
0x6db29a1c
0x6db29a1e
0x6db29a20
0x6db29a22
0x6db29a24
0x6db29a26
0x6db29a28
0x6db29a2a
0x6db29a2c
0x6db29a2e
0x6db29a30
0x6db29a32
0x6db29a34
0x6db29a36
0x6db29a38
0x6db29a3a
0x6db29a3c
0x6db29a3e
0x6db29a40
0x6db29a42
0x6db29a44
0x6db29a46
0x6db29a48
0x6db29a4a
0x6db29a4c
0x6db29a4e
0x6db29a50
0x6db29a52
0x6db29a54
0x6db29a56
0x6db29a58
0x6db29a5a
0x6db29a5c
0x6db29a5e
0x6db29a60
0x6db29a62
0x6db29a64
0x6db29a66
0x6db29a68
0x6db29a6a
0x6db29a6c
0x6db29a6e
0x6db29a70
0x6db29a72
0x6db29a74
0x6db29a76
0x6db29a78
0x6db29a7a
0x6db29a7c
0x6db29a7e
0x6db29a80
0x6db29a82
0x6db29a84
0x6db29a86
0x6db29a88
0x6db29a8a
0x6db29a8c
0x6db29a8e
0x6db29a90
0x6db29a92
0x6db29a94
0x6db29a96
0x6db29a98
0x6db29a9a
0x6db29a9c
0x6db29a9e
0x6db29aa0
0x6db29aa2
0x6db29aa4
0x6db29aa6
0x6db29aa8
0x6db29aaa
0x6db29aac
0x6db29aae
0x6db29ab0
0x6db29ab2
0x6db29ab4
0x6db29ab6
0x6db29ab8
0x6db29aba
0x6db29abc
0x6db29abe
0x6db29ac0
0x6db29ac2
0x6db29ac4
0x6db29ac6
0x6db29ac8
0x6db29aca
0x6db29acc
0x6db29ace
0x6db29ad0
0x6db29ad2
0x6db29ad4
0x6db29ad6
0x6db29ad8
0x6db29ada
0x6db29adc
0x6db29ade
0x6db29ae0
0x6db29ae2
0x6db29ae4
0x6db29ae6
0x6db29ae8
0x6db29aea
0x6db29aec
0x6db29aee
0x6db29af0
0x6db29af2
0x6db29af4
0x6db29af6
0x6db29af8
0x6db29afa
0x6db29afc
0x6db29afe
0x6db29b00
0x6db29b02
0x6db29b04
0x6db29b06
0x6db29b08
0x6db29b0a
0x6db29b0c
0x6db29b0e
0x6db29b10
0x6db29b12
0x6db29b14
0x6db29b16
0x6db29b18
0x6db29b1a
0x6db29b1c
0x6db29b1e
0x6db29b20
0x6db29b22
0x6db29b24
0x6db29b26
0x6db29b28
0x6db29b2a
0x6db29b2c
0x6db29b2e
0x6db29b30
0x6db29b32
0x6db29b34
0x6db29b36
0x6db29b38
0x6db29b3a
0x6db29b3c
0x6db29b3e
0x6db29b40
0x6db29b42
0x6db29b44
0x6db29b46
0x6db29b48
0x6db29b4a
0x6db29b4c
0x6db29b4e
0x6db29b50
0x6db29b52
0x6db29b54
0x6db29b56
0x6db29b58
0x6db29b5a
0x6db29b5c
0x6db29b5e
0x6db29b60
0x6db29b62
0x6db29b64
0x6db29b66
0x6db29b68
0x6db29b6a
0x6db29b6c
0x6db29b6e
0x6db29b70
0x6db29b72
0x6db29b74
0x6db29b76
0x6db29b78
0x6db29b7a
0x6db29b7c
0x6db29b7e
0x6db29b80
0x6db29b82
0x6db29b84
0x6db29b86
0x6db29b88
0x6db29b8a
0x6db29b8c
0x6db29b8e
0x6db29b90
0x6db29b92
0x6db29b94
0x6db29b96
0x6db29b98
0x6db29b9a
0x6db29b9c
0x6db29b9e
0x6db29ba0
0x6db29ba2
0x6db29ba4
0x6db29ba6
0x6db29ba8
0x6db29baa
0x6db29bac
0x6db29bae
0x6db29bb0
0x6db29bb2
0x6db29bb4
0x6db29bb6
0x6db29bb8
0x6db29bba
0x6db29bbc
0x6db29bbe
0x6db29bc0
0x6db29bc2
0x6db29bc4
0x6db29bc6
0x6db29bc8
0x6db29bca
0x6db29bcc
0x6db29bce
0x6db29bd0
0x6db29bd2
0x6db29bd4
0x6db29bd6
0x6db29bd8
0x6db29bda
0x6db29bdc
0x6db29bde
0x6db29be0
0x6db29be2
0x6db29be4
0x6db29be6
0x6db29be8
0x6db29bea
0x6db29bec
0x6db29bee
0x6db29bf0
0x6db29bf2
0x6db29bf4
0x6db29bf6
0x6db29bf8
0x6db29bfa
0x6db29bfc
0x6db29bfe
0x6db29c00
0x6db29c02
0x6db29c04
0x6db29c06
0x6db29c08
0x6db29c0a
0x6db29c0c
0x6db29c0e
0x6db29c10
0x6db29c12
0x6db29c14
0x6db29c16
0x6db29c18
0x6db29c1a
0x6db29c1c
0x6db29c1e
0x6db29c20
0x6db29c22
0x6db29c24
0x6db29c26
0x6db29c28
0x6db29c2a
0x6db29c2c
0x6db29c2e
0x6db29c30
0x6db29c32
0x6db29c34
0x6db29c36
0x6db29c38
0x6db29c3a
0x6db29c3c
0x6db29c3e
0x6db29c40
0x6db29c42
0x6db29c44
0x6db29c46
0x6db29c48
0x6db29c4a
0x6db29c4c
0x6db29c4e
0x6db29c50
0x6db29c52
0x6db29c54
0x6db29c56
0x6db29c58
0x6db29c5a
0x6db29c5c
0x6db29c5e
0x6db29c60
0x6db29c62
0x6db29c64
0x6db29c66
0x6db29c68
0x6db29c6a
0x6db29c6c
0x6db29c6e
0x6db29c70
0x6db29c72
0x6db29c74
0x6db29c76
0x6db29c78
0x6db29c7a
0x6db29c7c
0x6db29c7e
0x6db29c80
0x6db29c82
0x6db29c84
0x6db29c86
0x6db29c88
0x6db29c8a
0x6db29c8c
0x6db29c8e
0x6db29c90
0x6db29c92
0x6db29c94
0x6db29c96
0x6db29c98
0x6db29c9a
0x6db29c9c
0x6db29c9e
0x6db29ca0
0x6db29ca2
0x6db29ca4
0x6db29ca6
0x6db29ca8
0x6db29caa
0x6db29cac
0x6db29cae
0x6db29cb0
0x6db29cb2
0x6db29cb4
0x6db29cb6
0x6db29cb8
0x6db29cba
0x6db29cbc
0x6db29cbe
0x6db29cc0
0x6db29cc2
0x6db29cc4
0x6db29cc6
0x6db29cc8
0x6db29cca
0x6db29ccc
0x6db29cce
0x6db29cd0
0x6db29cd2
0x6db29cd4
0x6db29cd6
0x6db29cd8
0x6db29cda
0x6db29cdc
0x6db29cde
0x6db29ce0
0x6db29ce2
0x6db29ce4
0x6db29ce6
0x6db29ce8
0x6db29cea
0x6db29cec
0x6db29cee
0x6db29cf0
0x6db29cf2
0x6db29cf4
0x6db29cf6
0x6db29cf8
0x6db29cfa
0x6db29cfc
0x6db29cfe
0x6db29d00
0x6db29d02
0x6db29d04
0x6db29d06
0x6db29d08
0x6db29d0a
0x6db29d0c
0x6db29d0e
0x6db29d10
0x6db29d12
0x6db29d14
0x6db29d16
0x6db29d18
0x6db29d1a
0x6db29d1c
0x6db29d1e
0x6db29d20
0x6db29d22
0x6db29d24
0x6db29d26
0x6db29d28
0x6db29d2a
0x6db29d2c
0x6db29d2e
0x6db29d30
0x6db29d32
0x6db29d34
0x6db29d36
0x6db29d38
0x6db29d3a
0x6db29d3c
0x6db29d3e
0x6db29d40
0x6db29d42
0x6db29d44
0x6db29d46
0x6db29d48
0x6db29d4a
0x6db29d4c
0x6db29d4e
0x6db29d50
0x6db29d52
0x6db29d54
0x6db29d56
0x6db29d58
0x6db29d5a
0x6db29d5c
0x6db29d5e
0x6db29d60
0x6db29d62
0x6db29d64
0x6db29d66
0x6db29d68
0x6db29d6a
0x6db29d6c
0x6db29d6e
0x6db29d70
0x6db29d72
0x6db29d74
0x6db29d76
0x6db29d78
0x6db29d7a
0x6db29d7c
0x6db29d7e
0x6db29d80
0x6db29d82
0x6db29d84
0x6db29d86
0x6db29d88
0x6db29d8a
0x6db29d8c
0x6db29d8e
0x6db29d90
0x6db29d92
0x6db29d94
0x6db29d96
0x6db29d98
0x6db29d9a
0x6db29d9c
0x6db29d9e
0x6db29da0
0x6db29da2
0x6db29da4
0x6db29da6
0x6db29da8
0x6db29daa
0x6db29dac
0x6db29dae
0x6db29db0
0x6db29db2
0x6db29db4
0x6db29db6
0x6db29db8
0x6db29dba
0x6db29dbc
0x6db29dbe
0x6db29dc0
0x6db29dc2
0x6db29dc4
0x6db29dc6
0x6db29dc8
0x6db29dca
0x6db29dcc
0x6db29dce
0x6db29dd0
0x6db29dd2
0x6db29dd4
0x6db29dd6
0x6db29dd8
0x6db29dda
0x6db29ddc
0x6db29dde
0x6db29de0
0x6db29de2
0x6db29de4
0x6db29de6
0x6db29de8
0x6db29dea
0x6db29dec
0x6db29dee
0x6db29df0
0x6db29df2
0x6db29df4
0x6db29df6
0x6db29df8
0x6db29dfa
0x6db29dfc
0x6db29dfe
0x6db29e00
0x6db29e02
0x6db29e04
0x6db29e06
0x6db29e08
0x6db29e0a
0x6db29e0c
0x6db29e0e
0x6db29e10
0x6db29e12
0x6db29e14
0x6db29e16
0x6db29e18
0x6db29e1a
0x6db29e1c
0x6db29e1e
0x6db29e20
0x6db29e22
0x6db29e24
0x6db29e26
0x6db29e28
0x6db29e2a
0x6db29e2c
0x6db29e2e
0x6db29e30
0x6db29e32
0x6db29e34
0x6db29e36
0x6db29e38
0x6db29e3a
0x6db29e3c
0x6db29e3e
0x6db29e40
0x6db29e42
0x6db29e44
0x6db29e46
0x6db29e48
0x6db29e4a
0x6db29e4c
0x6db29e4e
0x6db29e50
0x6db29e52
0x6db29e54
0x6db29e56
0x6db29e58
0x6db29e5a
0x6db29e5c
0x6db29e5e
0x6db29e60
0x6db29e62
0x6db29e64
0x6db29e66
0x6db29e68
0x6db29e6a
0x6db29e6c
0x6db29e6e
0x6db29e70
0x6db29e72
0x6db29e74
0x6db29e76
0x6db29e78
0x6db29e7a
0x6db29e7c
0x6db29e7e
0x6db29e80
0x6db29e82
0x6db29e84
0x6db29e86
0x6db29e88
0x6db29e8a
0x6db29e8c
0x6db29e8e
0x6db29e90
0x6db29e92
0x6db29e94
0x6db29e96
0x6db29e98
0x6db29e9a
0x6db29e9c
0x6db29e9e
0x6db29ea0
0x6db29ea2
0x6db29ea4
0x6db29ea6
0x6db29ea8
0x6db29eaa
0x6db29eac
0x6db29eae
0x6db29eb0
0x6db29eb2
0x6db29eb4
0x6db29eb6
0x6db29eb8
0x6db29eba
0x6db29ebc
0x6db29ebe
0x6db29ec0
0x6db29ec2
0x6db29ec4
0x6db29ec6
0x6db29ec8
0x6db29eca
0x6db29ecc
0x6db29ece
0x6db29ed0
0x6db29ed2
0x6db29ed4
0x6db29ed6
0x6db29ed8
0x6db29eda
0x6db29edc
0x6db29ede
0x6db29ee0
0x6db29ee2
0x6db29ee4
0x6db29ee6
0x6db29ee8
0x6db29eea
0x6db29eec
0x6db29eee
0x6db29ef0
0x6db29ef2
0x6db29ef4
0x6db29ef6
0x6db29ef8
0x6db29efa
0x6db29efc
0x6db29efe
0x6db29f00
0x6db29f02
0x6db29f04
0x6db29f06
0x6db29f08
0x6db29f0a
0x6db29f0c
0x6db29f0e
0x6db29f10
0x6db29f12
0x6db29f14
0x6db29f16
0x6db29f18
0x6db29f1a
0x6db29f1c
0x6db29f1e
0x6db29f20
0x6db29f22
0x6db29f24
0x6db29f26
0x6db29f28
0x6db29f2a
0x6db29f2c
0x6db29f2e
0x6db29f30
0x6db29f32
0x6db29f34
0x6db29f36
0x6db29f38
0x6db29f3a
0x6db29f3c
0x6db29f3e
0x6db29f40
0x6db29f42
0x6db29f44
0x6db29f46
0x6db29f48
0x6db29f4a
0x6db29f4c
0x6db29f4e
0x6db29f50
0x6db29f52
0x6db29f54
0x6db29f56
0x6db29f58
0x6db29f5a
0x6db29f5c
0x6db29f5e
0x6db29f60
0x6db29f62
0x6db29f64
0x6db29f66
0x6db29f68
0x6db29f6a
0x6db29f6c
0x6db29f6e
0x6db29f70
0x6db29f72
0x6db29f74
0x6db29f76
0x6db29f78
0x6db29f7a
0x6db29f7c
0x6db29f7e
0x6db29f80
0x6db29f82
0x6db29f84
0x6db29f86
0x6db29f88
0x6db29f8a
0x6db29f8c
0x6db29f8e
0x6db29f90
0x6db29f92
0x6db29f94
0x6db29f96
0x6db29f98
0x6db29f9a
0x6db29f9c
0x6db29f9e
0x6db29fa0
0x6db29fa2
0x6db29fa4
0x6db29fa6
0x6db29fa8
0x6db29faa
0x6db29fac
0x6db29fae
0x6db29fb0
0x6db29fb2
0x6db29fb4
0x6db29fb6
0x6db29fb8
0x6db29fba
0x6db29fbc
0x6db29fbe
0x6db29fc0
0x6db29fc2
0x6db29fc4
0x6db29fc6
0x6db29fc8
0x6db29fca
0x6db29fcc
0x6db29fce
0x6db29fd0
0x6db29fd2
0x6db29fd4
0x6db29fd6
0x6db29fd8
0x6db29fda
0x6db29fdc
0x6db29fde
0x6db29fe0
0x6db29fe2
0x6db29fe4
0x6db29fe6
0x6db29fe8
0x6db29fea
0x6db29fec
0x6db29fee
0x6db29ff0
0x6db29ff2
0x6db29ff4
0x6db29ff6
0x6db29ff8
0x6db29ffa
0x6db29ffc
0x6db29ffe
0x6db2a000
0x6db2a002
0x6db2a004
0x6db2a006
0x6db2a008
0x6db2a00a
0x6db2a00c
0x6db2a00e
0x6db2a010
0x6db2a012
0x6db2a014
0x6db2a016
0x6db2a018
0x6db2a01a
0x6db2a01c
0x6db2a01e
0x6db2a020
0x6db2a022
0x6db2a024
0x6db2a026
0x6db2a028
0x6db2a02a
0x6db2a02c
0x6db2a02e
0x6db2a030
0x6db2a032
0x6db2a034
0x6db2a036
0x6db2a038
0x6db2a03a
0x6db2a03c
0x6db2a03e
0x6db2a040
0x6db2a042
0x6db2a044
0x6db2a046
0x6db2a048
0x6db2a04a
0x6db2a04c
0x6db2a04e
0x6db2a050
0x6db2a052
0x6db2a054
0x6db2a056
0x6db2a058
0x6db2a05a
0x6db2a05c
0x6db2a05e
0x6db2a060
0x6db2a062
0x6db2a064
0x6db2a066
0x6db2a068
0x6db2a06a
0x6db2a06c
0x6db2a06e
0x6db2a070
0x6db2a072
0x6db2a074
0x6db2a076
0x6db2a078
0x6db2a07a
0x6db2a07c
0x6db2a07e
0x6db2a080
0x6db2a082
0x6db2a084
0x6db2a086
0x6db2a088
0x6db2a08a
0x6db2a08c
0x6db2a08e
0x6db2a090
0x6db2a092
0x6db2a094
0x6db2a096
0x6db2a098
0x6db2a09a
0x6db2a09c
0x6db2a09e
0x6db2a0a0
0x6db2a0a2
0x6db2a0a4
0x6db2a0a6
0x6db2a0a8
0x6db2a0aa
0x6db2a0ac
0x6db2a0ae
0x6db2a0b0
0x6db2a0b2
0x6db2a0b4
0x6db2a0b6
0x6db2a0b8
0x6db2a0ba
0x6db2a0bc
0x6db2a0be
0x6db2a0c0
0x6db2a0c2
0x6db2a0c4
0x6db2a0c6
0x6db2a0c8
0x6db2a0ca
0x6db2a0cc
0x6db2a0ce
0x6db2a0d0
0x6db2a0d2
0x6db2a0d4
0x6db2a0d6
0x6db2a0d8
0x6db2a0da
0x6db2a0dc
0x6db2a0de
0x6db2a0e0
0x6db2a0e2
0x6db2a0e4
0x6db2a0e6
0x6db2a0e8
0x6db2a0ea
0x6db2a0ec
0x6db2a0ee
0x6db2a0f0
0x6db2a0f2
0x6db2a0f4
0x6db2a0f6
0x6db2a0f8
0x6db2a0fa
0x6db2a0fc
0x6db2a0fe
0x6db2a100
0x6db2a102
0x6db2a104
0x6db2a106
0x6db2a108
0x6db2a10a
0x6db2a10c
0x6db2a10e
0x6db2a110
0x6db2a112
0x6db2a114
0x6db2a116
0x6db2a118
0x6db2a11a
0x6db2a11c
0x6db2a11e
0x6db2a120
0x6db2a122
0x6db2a124
0x6db2a126
0x6db2a128
0x6db2a12a
0x6db2a12c
0x6db2a12e
0x6db2a130
0x6db2a132
0x6db2a134
0x6db2a136
0x6db2a138
0x6db2a13a
0x6db2a13c
0x6db2a13e
0x6db2a140
0x6db2a142
0x6db2a144
0x6db2a146
0x6db2a148
0x6db2a14a
0x6db2a14c
0x6db2a14e
0x6db2a150
0x6db2a152
0x6db2a154
0x6db2a156
0x6db2a158
0x6db2a15a
0x6db2a15c
0x6db2a15e
0x6db2a160
0x6db2a162
0x6db2a164
0x6db2a166
0x6db2a168
0x6db2a16a
0x6db2a16c
0x6db2a16e
0x6db2a170
0x6db2a172
0x6db2a174
0x6db2a176
0x6db2a178
0x6db2a17a
0x6db2a17c
0x6db2a17e
0x6db2a180
0x6db2a182
0x6db2a184
0x6db2a186
0x6db2a188
0x6db2a18a
0x6db2a18c
0x6db2a18e
0x6db2a190
0x6db2a192
0x6db2a194
0x6db2a196
0x6db2a198
0x6db2a19a
0x6db2a19c
0x6db2a19e
0x6db2a1a0
0x6db2a1a2
0x6db2a1a4
0x6db2a1a6
0x6db2a1a8
0x6db2a1aa
0x6db2a1ac
0x6db2a1ae
0x6db2a1b0
0x6db2a1b2
0x6db2a1b4
0x6db2a1b6
0x6db2a1b8
0x6db2a1ba
0x6db2a1bc
0x6db2a1be
0x6db2a1c0
0x6db2a1c2
0x6db2a1c4
0x6db2a1c6
0x6db2a1c8
0x6db2a1ca
0x6db2a1cc
0x6db2a1ce
0x6db2a1d0
0x6db2a1d2
0x6db2a1d4
0x6db2a1d6
0x6db2a1d8
0x6db2a1da
0x6db2a1dc
0x6db2a1de
0x6db2a1e0
0x6db2a1e2
0x6db2a1e4
0x6db2a1e6
0x6db2a1e8
0x6db2a1ea
0x6db2a1ec
0x6db2a1ee
0x6db2a1f0
0x6db2a1f2
0x6db2a1f4
0x6db2a1f6
0x6db2a1f8
0x6db2a1fa
0x6db2a1fc
0x6db2a1fe
0x6db2a200
0x6db2a202
0x6db2a204
0x6db2a206
0x6db2a208
0x6db2a20a
0x6db2a20c
0x6db2a20e
0x6db2a210
0x6db2a212
0x6db2a214
0x6db2a216
0x6db2a218
0x6db2a21a
0x6db2a21c
0x6db2a21e
0x6db2a220
0x6db2a222
0x6db2a224
0x6db2a226
0x6db2a228
0x6db2a22a
0x6db2a22c
0x6db2a22e
0x6db2a230
0x6db2a232
0x6db2a234
0x6db2a236
0x6db2a238
0x6db2a23a
0x6db2a23c
0x6db2a23e
0x6db2a240
0x6db2a242
0x6db2a244
0x6db2a246
0x6db2a248
0x6db2a24a
0x6db2a24c
0x6db2a24e
0x6db2a250
0x6db2a252
0x6db2a254
0x6db2a256
0x6db2a258
0x6db2a25a
0x6db2a25c
0x6db2a25e
0x6db2a260
0x6db2a262
0x6db2a264
0x6db2a266
0x6db2a268
0x6db2a26a
0x6db2a26c
0x6db2a26e
0x6db2a270
0x6db2a272
0x6db2a274
0x6db2a276
0x6db2a278
0x6db2a27a
0x6db2a27c
0x6db2a27e
0x6db2a280
0x6db2a282
0x6db2a284
0x6db2a286
0x6db2a288
0x6db2a28a
0x6db2a28c
0x6db2a28e
0x6db2a290
0x6db2a292
0x6db2a294
0x6db2a296
0x6db2a298
0x6db2a29a
0x6db2a29c
0x6db2a29e
0x6db2a2a0
0x6db2a2a2
0x6db2a2a4
0x6db2a2a6
0x6db2a2a8
0x6db2a2aa
0x6db2a2ac
0x6db2a2ae
0x6db2a2b0
0x6db2a2b2
0x6db2a2b4
0x6db2a2b6
0x6db2a2b8
0x6db2a2ba
0x6db2a2bc
0x6db2a2be
0x6db2a2c0
0x6db2a2c2
0x6db2a2c4
0x6db2a2c6
0x6db2a2c8
0x6db2a2ca
0x6db2a2cc
0x6db2a2ce
0x6db2a2d0
0x6db2a2d2
0x6db2a2d4
0x6db2a2d6
0x6db2a2d8
0x6db2a2da
0x6db2a2dc
0x6db2a2de
0x6db2a2e0
0x6db2a2e2
0x6db2a2e4
0x6db2a2e6
0x6db2a2e8
0x6db2a2ea
0x6db2a2ec
0x6db2a2ee
0x6db2a2f0
0x6db2a2f2
0x6db2a2f4
0x6db2a2f6
0x6db2a2f8
0x6db2a2fa
0x6db2a2fc
0x6db2a2fe
0x6db2a300
0x6db2a302
0x6db2a304
0x6db2a306
0x6db2a308
0x6db2a30a
0x6db2a30c
0x6db2a30e
0x6db2a310
0x6db2a312
0x6db2a314
0x6db2a316
0x6db2a318
0x6db2a31a
0x6db2a31c
0x6db2a31e
0x6db2a320
0x6db2a322
0x6db2a324
0x6db2a326
0x6db2a328
0x6db2a32a
0x6db2a32c
0x6db2a32e
0x6db2a330
0x6db2a332
0x6db2a334
0x6db2a336
0x6db2a338
0x6db2a33a
0x6db2a33c
0x6db2a33e
0x6db2a340
0x6db2a342
0x6db2a344
0x6db2a346
0x6db2a348
0x6db2a34a
0x6db2a34c
0x6db2a34e
0x6db2a350
0x6db2a352
0x6db2a354
0x6db2a356
0x6db2a358
0x6db2a35a
0x6db2a35c
0x6db2a35e
0x6db2a360
0x6db2a362
0x6db2a364
0x6db2a366
0x6db2a368
0x6db2a36a
0x6db2a36c
0x6db2a36e
0x6db2a370
0x6db2a372
0x6db2a374
0x6db2a376
0x6db2a378
0x6db2a37a
0x6db2a37c
0x6db2a37e
0x6db2a380
0x6db2a382
0x6db2a384
0x6db2a386
0x6db2a388
0x6db2a38a
0x6db2a38c
0x6db2a38e
0x6db2a390
0x6db2a392
0x6db2a394
0x6db2a396
0x6db2a398
0x6db2a39a
0x6db2a39c
0x6db2a39e
0x6db2a3a0
0x6db2a3a2
0x6db2a3a4
0x6db2a3a6
0x6db2a3a8
0x6db2a3aa
0x6db2a3ac
0x6db2a3ae
0x6db2a3b0
0x6db2a3b2
0x6db2a3b4
0x6db2a3b6
0x6db2a3b8
0x6db2a3ba
0x6db2a3bc
0x6db2a3be
0x6db2a3c0
0x6db2a3c2
0x6db2a3c4
0x6db2a3c6
0x6db2a3c8
0x6db2a3ca
0x6db2a3cc
0x6db2a3ce
0x6db2a3d0
0x6db2a3d2
0x6db2a3d4
0x6db2a3d6
0x6db2a3d8
0x6db2a3da
0x6db2a3dc
0x6db2a3de
0x6db2a3e0
0x6db2a3e2
0x6db2a3e4
0x6db2a3e6
0x6db2a3e8
0x6db2a3ea
0x6db2a3ec
0x6db2a3ee
0x6db2a3f0
0x6db2a3f2
0x6db2a3f4
0x6db2a3f6
0x6db2a3f8
0x6db2a3fa
0x6db2a3fc
0x6db2a3fe
0x6db2a400
0x6db2a402
0x6db2a404
0x6db2a406
0x6db2a408
0x6db2a40a
0x6db2a40c
0x6db2a40e
0x6db2a410
0x6db2a412
0x6db2a414
0x6db2a416
0x6db2a418
0x6db2a41a
0x6db2a41c
0x6db2a41e
0x6db2a420
0x6db2a422
0x6db2a424
0x6db2a426
0x6db2a428
0x6db2a42a
0x6db2a42c
0x6db2a42e
0x6db2a430
0x6db2a432
0x6db2a434
0x6db2a436
0x6db2a438
0x6db2a43a
0x6db2a43c
0x6db2a43e
0x6db2a440
0x6db2a442
0x6db2a444
0x6db2a446
0x6db2a448
0x6db2a44a
0x6db2a44c
0x6db2a44e
0x6db2a450
0x6db2a452
0x6db2a454
0x6db2a456
0x6db2a458
0x6db2a45a
0x6db2a45c
0x6db2a45e
0x6db2a460
0x6db2a462
0x6db2a464
0x6db2a466
0x6db2a468
0x6db2a46a
0x6db2a46c
0x6db2a46e
0x6db2a470
0x6db2a472
0x6db2a474
0x6db2a476
0x6db2a478
0x6db2a47a
0x6db2a47c
0x6db2a47e
0x6db2a480
0x6db2a482
0x6db2a484
0x6db2a486
0x6db2a488
0x6db2a48a
0x6db2a48c
0x6db2a48e
0x6db2a490
0x6db2a492
0x6db2a494
0x6db2a496
0x6db2a498
0x6db2a49a
0x6db2a49c
0x6db2a49e
0x6db2a4a0
0x6db2a4a2
0x6db2a4a4
0x6db2a4a6
0x6db2a4a8
0x6db2a4aa
0x6db2a4ac
0x6db2a4ae
0x6db2a4b0
0x6db2a4b2
0x6db2a4b4
0x6db2a4b6
0x6db2a4b8
0x6db2a4ba
0x6db2a4bc
0x6db2a4be
0x6db2a4c0
0x6db2a4c2
0x6db2a4c4
0x6db2a4c6
0x6db2a4c8
0x6db2a4ca
0x6db2a4cc
0x6db2a4ce
0x6db2a4d0
0x6db2a4d2
0x6db2a4d4
0x6db2a4d6
0x6db2a4d8
0x6db2a4da
0x6db2a4dc
0x6db2a4de
0x6db2a4e0
0x6db2a4e2
0x6db2a4e4
0x6db2a4e6
0x6db2a4e8
0x6db2a4ea
0x6db2a4ec
0x6db2a4ee
0x6db2a4f0
0x6db2a4f2
0x6db2a4f4
0x6db2a4f6
0x6db2a4f8
0x6db2a4fa
0x6db2a4fc
0x6db2a4fe
0x6db2a500
0x6db2a502
0x6db2a504
0x6db2a506
0x6db2a508
0x6db2a50a
0x6db2a50c
0x6db2a50e
0x6db2a510
0x6db2a512
0x6db2a514
0x6db2a516
0x6db2a518
0x6db2a51a
0x6db2a51c
0x6db2a51e
0x6db2a520
0x6db2a522
0x6db2a524
0x6db2a526
0x6db2a528
0x6db2a52a
0x6db2a52c
0x6db2a52e
0x6db2a530
0x6db2a532
0x6db2a534
0x6db2a536
0x6db2a538
0x6db2a53a
0x6db2a53c
0x6db2a53e
0x6db2a540
0x6db2a542
0x6db2a544
0x6db2a546
0x6db2a548
0x6db2a54a
0x6db2a54c
0x6db2a54e
0x6db2a550
0x6db2a552
0x6db2a554
0x6db2a556
0x6db2a558
0x6db2a55a
0x6db2a55c
0x6db2a55e
0x6db2a560
0x6db2a562
0x6db2a564
0x6db2a566
0x6db2a568
0x6db2a56a
0x6db2a56c
0x6db2a56e
0x6db2a570
0x6db2a572
0x6db2a574
0x6db2a576
0x6db2a578
0x6db2a57a
0x6db2a57c
0x6db2a57e
0x6db2a580
0x6db2a582
0x6db2a584
0x6db2a586
0x6db2a588
0x6db2a58a
0x6db2a58c
0x6db2a58e
0x6db2a590
0x6db2a592
0x6db2a594
0x6db2a596
0x6db2a598
0x6db2a59a
0x6db2a59c
0x6db2a59e
0x6db2a5a0
0x6db2a5a2
0x6db2a5a4
0x6db2a5a6
0x6db2a5a8
0x6db2a5aa
0x6db2a5ac
0x6db2a5ae
0x6db2a5b0
0x6db2a5b2
0x6db2a5b4
0x6db2a5b6
0x6db2a5b8
0x6db2a5ba
0x6db2a5bc
0x6db2a5be
0x6db2a5c0
0x6db2a5c2
0x6db2a5c4
0x6db2a5c6
0x6db2a5c8
0x6db2a5ca
0x6db2a5cc
0x6db2a5ce
0x6db2a5d0
0x6db2a5d2
0x6db2a5d4
0x6db2a5d6
0x6db2a5d8
0x6db2a5da
0x6db2a5dc
0x6db2a5de
0x6db2a5e0
0x6db2a5e2
0x6db2a5e4
0x6db2a5e6
0x6db2a5e8
0x6db2a5ea
0x6db2a5ec
0x6db2a5ee
0x6db2a5f0
0x6db2a5f2
0x6db2a5f4
0x6db2a5f6
0x6db2a5f8
0x6db2a5fa
0x6db2a5fc
0x6db2a5fe
0x6db2a600
0x6db2a602
0x6db2a604
0x6db2a606
0x6db2a608
0x6db2a60a
0x6db2a60c
0x6db2a60e
0x6db2a610
0x6db2a612
0x6db2a614
0x6db2a616
0x6db2a618
0x6db2a61a
0x6db2a61c
0x6db2a61e
0x6db2a620
0x6db2a622
0x6db2a624
0x6db2a626
0x6db2a628
0x6db2a62a
0x6db2a62c
0x6db2a62e
0x6db2a630
0x6db2a632
0x6db2a634
0x6db2a636
0x6db2a638
0x6db2a63a
0x6db2a63c
0x6db2a63e
0x6db2a640
0x6db2a642
0x6db2a644
0x6db2a646
0x6db2a648
0x6db2a64a
0x6db2a64c
0x6db2a64e
0x6db2a650
0x6db2a652
0x6db2a654
0x6db2a656
0x6db2a658
0x6db2a65a
0x6db2a65c
0x6db2a65e
0x6db2a660
0x6db2a662
0x6db2a664
0x6db2a666
0x6db2a668
0x6db2a66a
0x6db2a66c
0x6db2a66e
0x6db2a670
0x6db2a672
0x6db2a674
0x6db2a676
0x6db2a678
0x6db2a67a
0x6db2a67c
0x6db2a67e
0x6db2a680
0x6db2a682
0x6db2a684
0x6db2a686
0x6db2a688
0x6db2a68a
0x6db2a68c
0x6db2a68e
0x6db2a690
0x6db2a692
0x6db2a694
0x6db2a696
0x6db2a698
0x6db2a69a
0x6db2a69c
0x6db2a69e
0x6db2a6a0
0x6db2a6a2
0x6db2a6a4
0x6db2a6a6
0x6db2a6a8
0x6db2a6aa
0x6db2a6ac
0x6db2a6ae
0x6db2a6b0
0x6db2a6b2
0x6db2a6b4
0x6db2a6b6
0x6db2a6b8
0x6db2a6ba
0x6db2a6bc
0x6db2a6be
0x6db2a6c0
0x6db2a6c2
0x6db2a6c4
0x6db2a6c6
0x6db2a6c8
0x6db2a6ca
0x6db2a6cc
0x6db2a6ce
0x6db2a6d0
0x6db2a6d2
0x6db2a6d4
0x6db2a6d6
0x6db2a6d8
0x6db2a6da
0x6db2a6dc
0x6db2a6de
0x6db2a6e0
0x6db2a6e2
0x6db2a6e4
0x6db2a6e6
0x6db2a6e8
0x6db2a6ea
0x6db2a6ec
0x6db2a6ee
0x6db2a6f0
0x6db2a6f2
0x6db2a6f4
0x6db2a6f6
0x6db2a6f8
0x6db2a6fa
0x6db2a6fc
0x6db2a6fe
0x6db2a700
0x6db2a702
0x6db2a704
0x6db2a706
0x6db2a708
0x6db2a70a
0x6db2a70c
0x6db2a70e
0x6db2a710
0x6db2a712
0x6db2a714
0x6db2a716
0x6db2a718
0x6db2a71a
0x6db2a71c
0x6db2a71e
0x6db2a720
0x6db2a722
0x6db2a724
0x6db2a726
0x6db2a728
0x6db2a72a
0x6db2a72c
0x6db2a72e
0x6db2a730
0x6db2a732
0x6db2a734
0x6db2a736
0x6db2a738
0x6db2a73a
0x6db2a73c
0x6db2a73e
0x6db2a740
0x6db2a742
0x6db2a744
0x6db2a746
0x6db2a748
0x6db2a74a
0x6db2a74c
0x6db2a74e
0x6db2a750
0x6db2a752
0x6db2a754
0x6db2a756
0x6db2a758
0x6db2a75a
0x6db2a75c
0x6db2a75e
0x6db2a760
0x6db2a762
0x6db2a764
0x6db2a766
0x6db2a768
0x6db2a76a
0x6db2a76c
0x6db2a76e
0x6db2a770
0x6db2a772
0x6db2a774
0x6db2a776
0x6db2a778
0x6db2a77a
0x6db2a77c
0x6db2a77e
0x6db2a780
0x6db2a782
0x6db2a784
0x6db2a786
0x6db2a788
0x6db2a78a
0x6db2a78c
0x6db2a78e
0x6db2a790
0x6db2a792
0x6db2a794
0x6db2a796
0x6db2a798
0x6db2a79a
0x6db2a79c
0x6db2a79e
0x6db2a7a0
0x6db2a7a2
0x6db2a7a4
0x6db2a7a6
0x6db2a7a8
0x6db2a7aa
0x6db2a7ac
0x6db2a7ae
0x6db2a7b0
0x6db2a7b2
0x6db2a7b4
0x6db2a7b6
0x6db2a7b8
0x6db2a7ba
0x6db2a7bc
0x6db2a7be
0x6db2a7c0
0x6db2a7c2
0x6db2a7c4
0x6db2a7c6
0x6db2a7c8
0x6db2a7ca
0x6db2a7cc
0x6db2a7ce
0x6db2a7d0
0x6db2a7d2
0x6db2a7d4
0x6db2a7d6
0x6db2a7d8
0x6db2a7da
0x6db2a7dc
0x6db2a7de
0x6db2a7e0
0x6db2a7e2
0x6db2a7e4
0x6db2a7e6
0x6db2a7e8
0x6db2a7ea
0x6db2a7ec
0x6db2a7ee
0x6db2a7f0
0x6db2a7f2
0x6db2a7f4
0x6db2a7f6
0x6db2a7f8
0x6db2a7fa
0x6db2a7fc
0x6db2a7fe
0x6db2a800
0x6db2a802
0x6db2a804
0x6db2a806
0x6db2a808
0x6db2a80a
0x6db2a80c
0x6db2a80e
0x6db2a810
0x6db2a812
0x6db2a814
0x6db2a816
0x6db2a818
0x6db2a81a
0x6db2a81c
0x6db2a81e
0x6db2a820
0x6db2a822
0x6db2a824
0x6db2a826
0x6db2a828
0x6db2a82a
0x6db2a82c
0x6db2a82e
0x6db2a830
0x6db2a832
0x6db2a834
0x6db2a836
0x6db2a838
0x6db2a83a
0x6db2a83c
0x6db2a83e
0x6db2a840
0x6db2a842
0x6db2a844
0x6db2a846
0x6db2a848
0x6db2a84a
0x6db2a84c
0x6db2a84e
0x6db2a850
0x6db2a852
0x6db2a854
0x6db2a856
0x6db2a858
0x6db2a85a
0x6db2a85c
0x6db2a85e
0x6db2a860
0x6db2a862
0x6db2a864
0x6db2a866
0x6db2a868
0x6db2a86a
0x6db2a86c
0x6db2a86e
0x6db2a870
0x6db2a872
0x6db2a874
0x6db2a876
0x6db2a878
0x6db2a87a
0x6db2a87c
0x6db2a87e
0x6db2a880
0x6db2a882
0x6db2a884
0x6db2a886
0x6db2a888
0x6db2a88a
0x6db2a88c
0x6db2a88e
0x6db2a890
0x6db2a892
0x6db2a894
0x6db2a896
0x6db2a898
0x6db2a89a
0x6db2a89c
0x6db2a89e
0x6db2a8a0
0x6db2a8a2
0x6db2a8a4
0x6db2a8a6
0x6db2a8a8
0x6db2a8aa
0x6db2a8ac
0x6db2a8ae
0x6db2a8b0
0x6db2a8b2
0x6db2a8b4
0x6db2a8b6
0x6db2a8b8
0x6db2a8ba
0x6db2a8bc
0x6db2a8be
0x6db2a8c0
0x6db2a8c2
0x6db2a8c4
0x6db2a8c6
0x6db2a8c8
0x6db2a8ca
0x6db2a8cc
0x6db2a8ce
0x6db2a8d0
0x6db2a8d2
0x6db2a8d4
0x6db2a8d6
0x6db2a8d8
0x6db2a8da
0x6db2a8dc
0x6db2a8de
0x6db2a8e0
0x6db2a8e2
0x6db2a8e4
0x6db2a8e6
0x6db2a8e8
0x6db2a8ea
0x6db2a8ec
0x6db2a8ee
0x6db2a8f0
0x6db2a8f2
0x6db2a8f4
0x6db2a8f6
0x6db2a8f8
0x6db2a8fa
0x6db2a8fc
0x6db2a8fe
0x6db2a900
0x6db2a902
0x6db2a904
0x6db2a906
0x6db2a908
0x6db2a90a
0x6db2a90c
0x6db2a90e
0x6db2a910
0x6db2a912
0x6db2a914
0x6db2a916
0x6db2a918
0x6db2a91a
0x6db2a91c
0x6db2a91e
0x6db2a920
0x6db2a922
0x6db2a924
0x6db2a926
0x6db2a928
0x6db2a92a
0x6db2a92c
0x6db2a92e
0x6db2a930
0x6db2a932
0x6db2a934
0x6db2a936
0x6db2a938
0x6db2a93a
0x6db2a93c
0x6db2a93e
0x6db2a940
0x6db2a942
0x6db2a944
0x6db2a946
0x6db2a948
0x6db2a94a
0x6db2a94c
0x6db2a94e
0x6db2a950
0x6db2a952
0x6db2a954
0x6db2a956
0x6db2a958
0x6db2a95a
0x6db2a95c
0x6db2a95e
0x6db2a960
0x6db2a962
0x6db2a964
0x6db2a966
0x6db2a968
0x6db2a96a
0x6db2a96c
0x6db2a96e
0x6db2a970
0x6db2a972
0x6db2a974
0x6db2a976
0x6db2a978
0x6db2a97a
0x6db2a97c
0x6db2a97e
0x6db2a980
0x6db2a982
0x6db2a984
0x6db2a986
0x6db2a988
0x6db2a98a
0x6db2a98c
0x6db2a98e
0x6db2a990
0x6db2a992
0x6db2a994
0x6db2a996
0x6db2a998
0x6db2a99a
0x6db2a99c
0x6db2a99e
0x6db2a9a0
0x6db2a9a2
0x6db2a9a4
0x6db2a9a6
0x6db2a9a8
0x6db2a9aa
0x6db2a9ac
0x6db2a9ae
0x6db2a9b0
0x6db2a9b2
0x6db2a9b4
0x6db2a9b6
0x6db2a9b8
0x6db2a9ba
0x6db2a9bc
0x6db2a9be
0x6db2a9c0
0x6db2a9c2
0x6db2a9c4
0x6db2a9c6
0x6db2a9c8
0x6db2a9ca
0x6db2a9cc
0x6db2a9ce
0x6db2a9d0
0x6db2a9d2
0x6db2a9d4
0x6db2a9d6
0x6db2a9d8
0x6db2a9da
0x6db2a9dc
0x6db2a9de
0x6db2a9e0
0x6db2a9e2
0x6db2a9e4
0x6db2a9e6
0x6db2a9e8
0x6db2a9ea
0x6db2a9ec
0x6db2a9ee
0x6db2a9f0
0x6db2a9f2
0x6db2a9f4
0x6db2a9f6
0x6db2a9f8
0x6db2a9fa
0x6db2a9fc
0x6db2a9fe
0x6db2aa00
0x6db2aa02
0x6db2aa04
0x6db2aa06
0x6db2aa08
0x6db2aa0a
0x6db2aa0c
0x6db2aa0e
0x6db2aa10
0x6db2aa12
0x6db2aa14
0x6db2aa16
0x6db2aa18
0x6db2aa1a
0x6db2aa1c
0x6db2aa1e
0x6db2aa20
0x6db2aa22
0x6db2aa24
0x6db2aa26
0x6db2aa28
0x6db2aa2a
0x6db2aa2c
0x6db2aa2e
0x6db2aa30
0x6db2aa32
0x6db2aa34
0x6db2aa36
0x6db2aa38
0x6db2aa3a
0x6db2aa3c
0x6db2aa3e
0x6db2aa40
0x6db2aa42
0x6db2aa44
0x6db2aa46
0x6db2aa48
0x6db2aa4a
0x6db2aa4c
0x6db2aa4e
0x6db2aa50
0x6db2aa52
0x6db2aa54
0x6db2aa56
0x6db2aa58
0x6db2aa5a
0x6db2aa5c
0x6db2aa5e
0x6db2aa60
0x6db2aa62
0x6db2aa64
0x6db2aa66
0x6db2aa68
0x6db2aa6a
0x6db2aa6c
0x6db2aa6e
0x6db2aa70
0x6db2aa72
0x6db2aa74
0x6db2aa76
0x6db2aa78
0x6db2aa7a
0x6db2aa7c
0x6db2aa7e
0x6db2aa80
0x6db2aa82
0x6db2aa84
0x6db2aa86
0x6db2aa88
0x6db2aa8a
0x6db2aa8c
0x6db2aa8e
0x6db2aa90
0x6db2aa92
0x6db2aa94
0x6db2aa96
0x6db2aa98
0x6db2aa9a
0x6db2aa9c
0x6db2aa9e
0x6db2aaa0
0x6db2aaa2
0x6db2aaa4
0x6db2aaa6
0x6db2aaa8
0x6db2aaaa
0x6db2aaac
0x6db2aaae
0x6db2aab0
0x6db2aab2
0x6db2aab4
0x6db2aab6
0x6db2aab8
0x6db2aaba
0x6db2aabc
0x6db2aabe
0x6db2aac0
0x6db2aac2
0x6db2aac4
0x6db2aac6
0x6db2aac8
0x6db2aaca
0x6db2aacc
0x6db2aace
0x6db2aad0
0x6db2aad2
0x6db2aad4
0x6db2aad6
0x6db2aad8
0x6db2aada
0x6db2aadc
0x6db2aade
0x6db2aae0
0x6db2aae2
0x6db2aae4
0x6db2aae6
0x6db2aae8
0x6db2aaea
0x6db2aaec
0x6db2aaee
0x6db2aaf0
0x6db2aaf2
0x6db2aaf4
0x6db2aaf6
0x6db2aaf8
0x6db2aafa
0x6db2aafc
0x6db2aafe
0x6db2ab00
0x6db2ab02
0x6db2ab04
0x6db2ab06
0x6db2ab08
0x6db2ab0a
0x6db2ab0c
0x6db2ab0e
0x6db2ab10
0x6db2ab12
0x6db2ab14
0x6db2ab16
0x6db2ab18
0x6db2ab1a
0x6db2ab1c
0x6db2ab1e
0x6db2ab20
0x6db2ab22
0x6db2ab24
0x6db2ab26
0x6db2ab28
0x6db2ab2a
0x6db2ab2c
0x6db2ab2e
0x6db2ab30
0x6db2ab32
0x6db2ab34
0x6db2ab36
0x6db2ab38
0x6db2ab3a
0x6db2ab3c
0x6db2ab3e
0x6db2ab40
0x6db2ab42
0x6db2ab44
0x6db2ab46
0x6db2ab48
0x6db2ab4a
0x6db2ab4c
0x6db2ab4e
0x6db2ab50
0x6db2ab52
0x6db2ab54
0x6db2ab56
0x6db2ab58
0x6db2ab5a
0x6db2ab5c
0x6db2ab5e
0x6db2ab60
0x6db2ab62
0x6db2ab64
0x6db2ab66
0x6db2ab68
0x6db2ab6a
0x6db2ab6c
0x6db2ab6e
0x6db2ab70
0x6db2ab72
0x6db2ab74
0x6db2ab76
0x6db2ab78
0x6db2ab7a
0x6db2ab7c
0x6db2ab7e
0x6db2ab80
0x6db2ab82
0x6db2ab84
0x6db2ab86
0x6db2ab88
0x6db2ab8a
0x6db2ab8c
0x6db2ab8e
0x6db2ab90
0x6db2ab92
0x6db2ab94
0x6db2ab96
0x6db2ab98
0x6db2ab9a
0x6db2ab9c
0x6db2ab9e
0x6db2aba0
0x6db2aba2
0x6db2aba4
0x6db2aba6
0x6db2aba8
0x6db2abaa
0x6db2abac
0x6db2abae
0x6db2abb0
0x6db2abb2
0x6db2abb4
0x6db2abb6
0x6db2abb8
0x6db2abba
0x6db2abbc
0x6db2abbe
0x6db2abc0
0x6db2abc2
0x6db2abc4
0x6db2abc6
0x6db2abc8
0x6db2abca
0x6db2abcc
0x6db2abce
0x6db2abd0
0x6db2abd2
0x6db2abd4
0x6db2abd6
0x6db2abd8
0x6db2abda
0x6db2abdc
0x6db2abde
0x6db2abe0
0x6db2abe2
0x6db2abe4
0x6db2abe6
0x6db2abe8
0x6db2abea
0x6db2abec
0x6db2abee
0x6db2abf0
0x6db2abf2
0x6db2abf4
0x6db2abf6
0x6db2abf8
0x6db2abfa
0x6db2abfc
0x6db2abfe
0x6db2ac00
0x6db2ac02
0x6db2ac04
0x6db2ac06
0x6db2ac08
0x6db2ac0a
0x6db2ac0c
0x6db2ac0e
0x6db2ac10
0x6db2ac12
0x6db2ac14
0x6db2ac16
0x6db2ac18
0x6db2ac1a
0x6db2ac1c
0x6db2ac1e
0x6db2ac20
0x6db2ac22
0x6db2ac24
0x6db2ac26
0x6db2ac28
0x6db2ac2a
0x6db2ac2c
0x6db2ac2e
0x6db2ac30
0x6db2ac32
0x6db2ac34
0x6db2ac36
0x6db2ac38
0x6db2ac3a
0x6db2ac3c
0x6db2ac3e
0x6db2ac40
0x6db2ac42
0x6db2ac44
0x6db2ac46
0x6db2ac48
0x6db2ac4a
0x6db2ac4c
0x6db2ac4e
0x6db2ac50
0x6db2ac52
0x6db2ac54
0x6db2ac56
0x6db2ac58
0x6db2ac5a
0x6db2ac5c
0x6db2ac5e
0x6db2ac60
0x6db2ac62
0x6db2ac64
0x6db2ac66
0x6db2ac68
0x6db2ac6a
0x6db2ac6c
0x6db2ac6e
0x6db2ac70
0x6db2ac72
0x6db2ac74
0x6db2ac76
0x6db2ac78
0x6db2ac7a
0x6db2ac7c
0x6db2ac7e
0x6db2ac80
0x6db2ac82
0x6db2ac84
0x6db2ac86
0x6db2ac88
0x6db2ac8a
0x6db2ac8c
0x6db2ac8e
0x6db2ac90
0x6db2ac92
0x6db2ac94
0x6db2ac96
0x6db2ac98
0x6db2ac9a
0x6db2ac9c
0x6db2ac9e
0x6db2aca0
0x6db2aca2
0x6db2aca4
0x6db2aca6
0x6db2aca8
0x6db2acaa
0x6db2acac
0x6db2acae
0x6db2acb0
0x6db2acb2
0x6db2acb4
0x6db2acb6
0x6db2acb8
0x6db2acba
0x6db2acbc
0x6db2acbe
0x6db2acc0
0x6db2acc2
0x6db2acc4
0x6db2acc6
0x6db2acc8
0x6db2acca
0x6db2accc
0x6db2acce
0x6db2acd0
0x6db2acd2
0x6db2acd4
0x6db2acd6
0x6db2acd8
0x6db2acda
0x6db2acdc
0x6db2acde
0x6db2ace0
0x6db2ace2
0x6db2ace4
0x6db2ace6
0x6db2ace8
0x6db2acea
0x6db2acec
0x6db2acee
0x6db2acf0
0x6db2acf2
0x6db2acf4
0x6db2acf6
0x6db2acf8
0x6db2acfa
0x6db2acfc
0x6db2acfe
0x6db2ad00
0x6db2ad02
0x6db2ad04
0x6db2ad06
0x6db2ad08
0x6db2ad0a
0x6db2ad0c
0x6db2ad0e
0x6db2ad10
0x6db2ad12
0x6db2ad14
0x6db2ad16
0x6db2ad18
0x6db2ad1a
0x6db2ad1c
0x6db2ad1e
0x6db2ad20
0x6db2ad22
0x6db2ad24
0x6db2ad26
0x6db2ad28
0x6db2ad2a
0x6db2ad2c
0x6db2ad2e
0x6db2ad30
0x6db2ad32
0x6db2ad34
0x6db2ad36
0x6db2ad38
0x6db2ad3a
0x6db2ad3c
0x6db2ad3e
0x6db2ad40
0x6db2ad42
0x6db2ad44
0x6db2ad46
0x6db2ad48
0x6db2ad4a
0x6db2ad4c
0x6db2ad4e
0x6db2ad50
0x6db2ad52
0x6db2ad54
0x6db2ad56
0x6db2ad58
0x6db2ad5a
0x6db2ad5c
0x6db2ad5e
0x6db2ad60
0x6db2ad62
0x6db2ad64
0x6db2ad66
0x6db2ad68
0x6db2ad6a
0x6db2ad6c
0x6db2ad6e
0x6db2ad70
0x6db2ad72
0x6db2ad74
0x6db2ad76
0x6db2ad78
0x6db2ad7a
0x6db2ad7c
0x6db2ad7e
0x6db2ad80
0x6db2ad82
0x6db2ad84
0x6db2ad86
0x6db2ad88
0x6db2ad8a
0x6db2ad8c
0x6db2ad8e
0x6db2ad90
0x6db2ad92
0x6db2ad94
0x6db2ad96
0x6db2ad98
0x6db2ad9a
0x6db2ad9c
0x6db2ad9e
0x6db2ada0
0x6db2ada2
0x6db2ada4
0x6db2ada6
0x6db2ada8
0x6db2adaa
0x6db2adac
0x6db2adae
0x6db2adb0
0x6db2adb2
0x6db2adb4
0x6db2adb6
0x6db2adb8
0x6db2adba
0x6db2adbc
0x6db2adbe
0x6db2adc0
0x6db2adc2
0x6db2adc4
0x6db2adc6
0x6db2adc8
0x6db2adca
0x6db2adcc
0x6db2adce
0x6db2add0
0x6db2add2
0x6db2add4
0x6db2add6
0x6db2add8
0x6db2adda
0x6db2addc
0x6db2adde
0x6db2ade0
0x6db2ade2
0x6db2ade4
0x6db2ade6
0x6db2ade8
0x6db2adea
0x6db2adec
0x6db2adee
0x6db2adf0
0x6db2adf2
0x6db2adf4
0x6db2adf6
0x6db2adf8
0x6db2adfa
0x6db2adfc
0x6db2adfe
0x6db2ae00
0x6db2ae02
0x6db2ae04
0x6db2ae06
0x6db2ae08
0x6db2ae0a
0x6db2ae0c
0x6db2ae0e
0x6db2ae10
0x6db2ae12
0x6db2ae14
0x6db2ae16
0x6db2ae18
0x6db2ae1a
0x6db2ae1c
0x6db2ae1e
0x6db2ae20
0x6db2ae22
0x6db2ae24
0x6db2ae26
0x6db2ae28
0x6db2ae2a
0x6db2ae2c
0x6db2ae2e
0x6db2ae30
0x6db2ae32
0x6db2ae34
0x6db2ae36
0x6db2ae38
0x6db2ae3a
0x6db2ae3c
0x6db2ae3e
0x6db2ae40
0x6db2ae42
0x6db2ae44
0x6db2ae46
0x6db2ae48
0x6db2ae4a
0x6db2ae4c
0x6db2ae4e
0x6db2ae50
0x6db2ae52
0x6db2ae54
0x6db2ae56
0x6db2ae58
0x6db2ae5a
0x6db2ae5c
0x6db2ae5e
0x6db2ae60
0x6db2ae62
0x6db2ae64
0x6db2ae66
0x6db2ae68
0x6db2ae6a
0x6db2ae6c
0x6db2ae6e
0x6db2ae70
0x6db2ae72
0x6db2ae74
0x6db2ae76
0x6db2ae78
0x6db2ae7a
0x6db2ae7c
0x6db2ae7e
0x6db2ae80
0x6db2ae82
0x6db2ae84
0x6db2ae86
0x6db2ae88
0x6db2ae8a
0x6db2ae8c
0x6db2ae8e
0x6db2ae90
0x6db2ae92
0x6db2ae94
0x6db2ae96
0x6db2ae98
0x6db2ae9a
0x6db2ae9c
0x6db2ae9e
0x6db2aea0
0x6db2aea2
0x6db2aea4
0x6db2aea6
0x6db2aea8
0x6db2aeaa
0x6db2aeac
0x6db2aeae
0x6db2aeb0
0x6db2aeb2
0x6db2aeb4
0x6db2aeb6
0x6db2aeb8
0x6db2aeba
0x6db2aebc
0x6db2aebe
0x6db2aec0
0x6db2aec2
0x6db2aec4
0x6db2aec6
0x6db2aec8
0x6db2aeca
0x6db2aecc
0x6db2aece
0x6db2aed0
0x6db2aed2
0x6db2aed4
0x6db2aed6
0x6db2aed8
0x6db2aeda
0x6db2aedc
0x6db2aede
0x6db2aee0
0x6db2aee2
0x6db2aee4
0x6db2aee6
0x6db2aee8
0x6db2aeea
0x6db2aeec
0x6db2aeee
0x6db2aef0
0x6db2aef2
0x6db2aef4
0x6db2aef6
0x6db2aef8
0x6db2aefa
0x6db2aefc
0x6db2aefe
0x6db2af00
0x6db2af02
0x6db2af04
0x6db2af06
0x6db2af08
0x6db2af0a
0x6db2af0c
0x6db2af0e
0x6db2af10
0x6db2af12
0x6db2af14
0x6db2af16
0x6db2af18
0x6db2af1a
0x6db2af1c
0x6db2af1e
0x6db2af20
0x6db2af22
0x6db2af24
0x6db2af26
0x6db2af28
0x6db2af2a
0x6db2af2c
0x6db2af2e
0x6db2af30
0x6db2af32
0x6db2af34
0x6db2af36
0x6db2af38
0x6db2af3a
0x6db2af3c
0x6db2af3e
0x6db2af40
0x6db2af42
0x6db2af44
0x6db2af46
0x6db2af48
0x6db2af4a
0x6db2af4c
0x6db2af4e
0x6db2af50
0x6db2af52
0x6db2af54
0x6db2af56
0x6db2af58
0x6db2af5a
0x6db2af5c
0x6db2af5e
0x6db2af60
0x6db2af62
0x6db2af64
0x6db2af66
0x6db2af68
0x6db2af6a
0x6db2af6c
0x6db2af6e
0x6db2af70
0x6db2af72
0x6db2af74
0x6db2af76
0x6db2af78
0x6db2af7a
0x6db2af7c
0x6db2af7e
0x6db2af80
0x6db2af82
0x6db2af84
0x6db2af86
0x6db2af88
0x6db2af8a
0x6db2af8c
0x6db2af8e
0x6db2af90
0x6db2af92
0x6db2af94
0x6db2af96
0x6db2af98
0x6db2af9a
0x6db2af9c
0x6db2af9e
0x6db2afa0
0x6db2afa2
0x6db2afa4
0x6db2afa6
0x6db2afa8
0x6db2afaa
0x6db2afac
0x6db2afae
0x6db2afb0
0x6db2afb2
0x6db2afb4
0x6db2afb6
0x6db2afb8
0x6db2afba
0x6db2afbc
0x6db2afbe
0x6db2afc0
0x6db2afc2
0x6db2afc4
0x6db2afc6
0x6db2afc8
0x6db2afca
0x6db2afcc
0x6db2afce
0x6db2afd0
0x6db2afd2
0x6db2afd4
0x6db2afd6
0x6db2afd8
0x6db2afda
0x6db2afdc
0x6db2afde
0x6db2afe0
0x6db2afe2
0x6db2afe4
0x6db2afe6
0x6db2afe8
0x6db2afea
0x6db2afec
0x6db2afee
0x6db2aff0
0x6db2aff2
0x6db2aff4
0x6db2aff6
0x6db2aff8
0x6db2affa
0x6db2affc
0x6db2affe
0x6db2affe
0x6db2b000
0x6db2b001
0x6db2b064
0x6db2b064
0x6db2b067
0x00000000
0x00000000
0x00000000
0x00000000
0x6db2b003
0x6db2b003
0x6db2b034
0x6db2b034
0x6db2b035
0x00000000
0x6db2b037
0x6db2b037
0x00000000
0x6db2b037
0x6db2b005
0x6db2b005
0x6db2b074
0x6db2b074
0x00000000
0x6db2b007
0x6db2b007
0x6db2b038
0x6db2b038
0x6db2b069
0x6db2b069
0x00000000
0x6db2b06c
0x6db2b06c
0x6db2b071
0x6db2b071
0x00000000
0x6db2b071
0x6db2b03a
0x6db2b03a
0x6db2b0a5
0x6db2b0c7
0x6db2b0c7
0x00000000
0x6db2b0a7
0x6db2b0a7
0x6db2b0aa
0x6db2b0ac
0x6db2b0ac
0x6db2b0ad
0x00000000
0x6db2b0af
0x6db2b0af
0x00000000
0x6db2b0b2
0x6db2b0b2
0x6db2b0b2
0x00000000
0x6db2b0b2
0x6db2b0af
0x6db2b0ad
0x6db2b03c
0x6db2b03c
0x6db2b03d
0x6db2b0b3
0x6db2b0b3
0x6db2b0b4
0x00000000
0x6db2b03f
0x6db2b03f
0x6db2b044
0x6db2b075
0x6db2b075
0x6db2b07a
0x6db2b07b
0x6db2b07c
0x6db2b07d
0x6db2b07d
0x6db2b07e
0x6db2b07f
0x00000000
0x6db2b046
0x6db2b046
0x6db2b0ba
0x6db2b0ba
0x6db2b0be
0x6db2b0be
0x6db2b048
0x6db2b048
0x6db2b04a
0x6db2b04d
0x6db2b0b8
0x6db2b0b8
0x6db2b0b8
0x00000000
0x6db2b04f
0x6db2b04f
0x6db2b080
0x6db2b080
0x6db2b081
0x6db2b082
0x6db2b083
0x6db2b085
0x6db2b089
0x6db2b089
0x6db2b08b
0x6db2b08e
0x00000000
0x6db2b090
0x6db2b090
0x00000000
0x6db2b093
0x6db2b093
0x6db2b0b5
0x6db2b0b5
0x6db2b0b5
0x6db2b0b5
0x00000000
0x6db2b095
0x6db2b095
0x6db2b095
0x6db2b097
0x6db2b097
0x6db2b09a
0x00000000
0x6db2b09c
0x6db2b09c
0x6db2b09c
0x6db2b0a0
0x6db2b0a0
0x6db2b0a0
0x6db2b0a0
0x6db2b09a
0x6db2b093
0x6db2b090
0x6db2b052
0x6db2b052
0x6db2b054
0x6db2b056
0x6db2b056
0x6db2b056
0x6db2b059
0x6db2b0cd
0x6db2b0cd
0x6db2b0ce
0x6db2b0ce
0x6db2b0d2
0x6db2b0d2
0x6db2b0d7
0x6db2b0d7
0x6db2b0d7
0x6db2b0da
0x6db2b0fc
0x6db2b0fc
0x6db2b0fd
0x00000000
0x6db2b0ff
0x6db2b0ff
0x00000000
0x6db2b101
0x6db2b101
0x00000000
0x00000000
0x00000000
0x00000000
0x6db2b101
0x6db2b0ff
0x6db2b0dc
0x6db2b0e3
0x6db2b0e4
0x6db2b0e9
0x6db2b0e9
0x6db2b0e9
0x6db2b0eb
0x6db2b0f0
0x6db2b12f
0x6db2b12f
0x6db2b130
0x6db2b130
0x6db2b0f2
0x6db2b0f2
0x6db2b0f2
0x6db2b0f2
0x6db2b0f7
0x6db2b103
0x6db2b103
0x6db2b134
0x00000000
0x6db2b136
0x6db2b136
0x00000000
0x6db2b138
0x6db2b138
0x6db2b139
0x00000000
0x6db2b13b
0x6db2b13b
0x6db2b140
0x00000000
0x6db2b142
0x6db2b142
0x6db2b1b6
0x6db2b1b6
0x00000000
0x6db2b144
0x6db2b144
0x6db2b146
0x00000000
0x6db2b148
0x6db2b148
0x00000000
0x6db2b148
0x6db2b146
0x6db2b142
0x6db2b140
0x6db2b139
0x6db2b136
0x6db2b105
0x6db2b105
0x6db2b108
0x6db2b109
0x6db2b10b
0x6db2b10c
0x6db2b10c
0x6db2b10e
0x6db2b10e
0x6db2b111
0x6db2b149
0x6db2b149
0x6db2b14a
0x6db2b14d
0x6db2b14f
0x6db2b151
0x6db2b151
0x6db2b153
0x00000000
0x00000000
0x00000000
0x00000000
0x6db2b113
0x6db2b113
0x6db2b115
0x6db2b115
0x6db2b115
0x6db2b11b
0x6db2b120
0x6db2b122
0x6db2b122
0x6db2b123
0x6db2b123
0x6db2b126
0x6db2b126
0x6db2b155
0x6db2b155
0x6db2b156
0x6db2b157
0x6db2b15a
0x00000000
0x6db2b15c
0x6db2b15c
0x6db2b15e
0x6db2b15e
0x00000000
0x6db2b15e
0x6db2b128
0x6db2b128
0x6db2b160
0x6db2b160
0x6db2b1ce
0x6db2b1ce
0x6db2b1d7
0x6db2b1da
0x6db2b1db
0x6db2b1db
0x6db2b1df
0x6db2b1e3
0x6db2b1ed
0x6db2b1ed
0x6db2b1f0
0x6db2b1f0
0x6db2b162
0x6db2b162
0x6db2b162
0x6db2b165
0x6db2b165
0x6db2b1c8
0x6db2b1c8
0x6db2b1c8
0x6db2b1ca
0x6db2b1cb
0x6db2b1cc
0x6db2b1cc
0x6db2b1cd
0x6db2b1cd
0x00000000
0x6db2b167
0x6db2b167
0x6db2b168
0x6db2b168
0x6db2b170
0x6db2b170
0x6db2b170
0x6db2b171
0x6db2b171
0x6db2b172
0x6db2b173
0x6db2b174
0x6db2b175
0x6db2b176
0x6db2b179
0x6db2b17b
0x6db2b17b
0x6db2b17c
0x6db2b17c
0x6db2b17f
0x6db2b17f
0x6db2b181
0x6db2b1ff
0x6db2b1ff
0x6db2b183
0x6db2b183
0x6db2b184
0x6db2b185
0x6db2b188
0x6db2b1aa
0x6db2b1aa
0x6db2b1ac
0x6db2b1ac
0x6db2b1af
0x6db2b1af
0x6db2b1b2
0x6db2b1b2
0x6db2b18a
0x6db2b18a
0x6db2b18c
0x6db2b18f
0x6db2b190
0x6db2b190
0x6db2b192
0x6db2b196
0x6db2b1b8
0x6db2b1b8
0x6db2b1bf
0x6db2b1bf
0x6db2b1c1
0x6db2b1c2
0x6db2b1c2
0x00000000
0x6db2b198
0x6db2b198
0x6db2b19b
0x6db2b19b
0x6db2b19c
0x6db2b19e
0x6db2b1a0
0x6db2b1a0
0x6db2b1a1
0x6db2b1a1
0x6db2b216
0x6db2b219
0x00000000
0x6db2b1a3
0x6db2b1a3
0x6db2b1a4
0x6db2b21a
0x6db2b21a
0x6db2b221
0x6db2b227
0x6db2b227
0x6db2b227
0x6db2b22a
0x6db2b22b
0x6db2b1a6
0x6db2b1a6
0x6db2b1a6
0x00000000
0x6db2b1a6
0x6db2b1a4
0x6db2b1a1
0x6db2b196
0x6db2b188
0x6db2b181
0x6db2b165
0x6db2b12a
0x6db2b12a
0x6db2b12c
0x6db2b12d
0x6db2b12d
0x00000000
0x6db2b12d
0x6db2b128
0x6db2b126
0x6db2b111
0x6db2b0f9
0x6db2b0f9
0x6db2b0f9
0x6db2b0fb
0x6db2b0fb
0x00000000
0x6db2b0fb
0x6db2b0f7
0x6db2b0f0
0x6db2b05b
0x6db2b05b
0x6db2b062
0x6db2b062
0x00000000
0x6db2b062
0x6db2b059
0x6db2b04f
0x6db2b04d
0x6db2b046
0x6db2b044
0x6db2b03d
0x6db2b03a
0x6db2b009
0x6db2b009
0x6db2b00c
0x6db2b00d
0x6db2b00f
0x6db2b017
0x6db2b019
0x6db2b024
0x6db2b026
0x6db2b027
0x6db2b02e
0x6db2b030
0x6db2b031
0x6db2b031
0x00000000
0x6db2b031
0x6db2b007
0x6db2b005
0x6db2b003
0x6db2b2b2
0x6db2b2b2
0x6db24bcb
0x6db24bce
0x6db24bd1
0x6db24bd7
0x6db24bde
0x6db24be5
0x6db24bee
0x6db24bf6
0x6db24bfa
0x6db24bfd
0x6db24c03
0x6db24c06
0x6db24c08
0x00000000
0x6db24c0e
0x6db24c19
0x6db24c19
0x6db24c08
0x6db24bc5
0x6db24b22
0x6db24afc
0x6db24afc
0x6db24b05
0x6db24b05

APIs

TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6DB25ADA,?,?,?,?,6DB26ADD), ref: 6DB24AED

Part of subcall function 6DB24990: pthread_mutex_lock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB249A8
Part of subcall function 6DB24990: pthread_tls_init.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB249B7
Part of subcall function 6DB24990: pthread_mutex_unlock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB249C9

Strings

Error cleaning up spin_keys for thread , xrefs: 6DB24A57, 6DB24AD2

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Valuepthread_mutex_lockpthread_mutex_unlockpthread_tls_init
String ID: Error cleaning up spin_keys for thread
API String ID: 3593121786-2906507043
Opcode ID: fcd837583bb18b551ccd9a988e836ab372c69075e1caba32a4bc7c91e3b7e0cd
Instruction ID: 5f77293f746458720c5159d47f482139353d125dd6d5f113b2df1a77e7403bb4
Opcode Fuzzy Hash: fcd837583bb18b551ccd9a988e836ab372c69075e1caba32a4bc7c91e3b7e0cd
Instruction Fuzzy Hash: 4F3126B29047418FE710AF7AD54972ABBF4FB49315F014A2DE89A87648E774D408CF92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23920 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 90
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

calloc.MSVCRT ref: 6DB23948
pthread_mutex_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6DB23A87), ref: 6DB23980
pthread_mutex_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6DB23A87), ref: 6DB23997
pthread_cond_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6DB23A87), ref: 6DB239AE

Part of subcall function 6DB21DD0: calloc.MSVCRT ref: 6DB21E02
Part of subcall function 6DB21DD0: CreateSemaphoreA.KERNEL32 ref: 6DB21E58
Part of subcall function 6DB21DD0: CreateSemaphoreA.KERNEL32 ref: 6DB21E7F
Part of subcall function 6DB21DD0: RtlInitializeCriticalSection.NTDLL ref: 6DB21E9E
Part of subcall function 6DB21DD0: RtlInitializeCriticalSection.NTDLL ref: 6DB21EA9
Part of subcall function 6DB21DD0: RtlInitializeCriticalSection.NTDLL ref: 6DB21EB4

??3@YAXPAX@Z.MSVCRT ref: 6DB239D7
pthread_mutex_destroy.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6DB23A87), ref: 6DB239F7
??3@YAXPAX@Z.MSVCRT ref: 6DB239FF
pthread_mutex_destroy.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6DB23A87), ref: 6DB23A37
pthread_mutex_destroy.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6DB23A87), ref: 6DB23A3F
??3@YAXPAX@Z.MSVCRT ref: 6DB23A47

Strings

, xrefs: 6DB23939

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ??3@CriticalInitializeSectionpthread_mutex_destroy$CreateSemaphorecallocpthread_mutex_init$pthread_cond_init
String ID:
API String ID: 3338094822-3916222277
Opcode ID: 3688def880ccab90dadea789450eb0615040d34b8df0cbcd7f165af587010fb6
Instruction ID: 10e5cc5bc06d84b6b2c42d9c7aa028660f2cb5e34bd7702b8a9992a6ff2742a9
Opcode Fuzzy Hash: 3688def880ccab90dadea789450eb0615040d34b8df0cbcd7f165af587010fb6
Instruction Fuzzy Hash: 30310AB26083458FD704AF26D48436EBBE4EF85718F06886ED5DC9B309D375D84A8B92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB26260 Relevance: 18.2, APIs: 12, Instructions: 166
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 27%

			E6DB26260(void* __eflags, signed int _a4, signed char* _a8, intOrPtr _a12, intOrPtr _a16) {
				signed int _v40;
				intOrPtr _v44;
				signed int _v48;
				signed int _v52;
				signed char _v56;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t52;
				void* _t56;
				signed int _t64;
				signed int _t66;
				signed char _t72;
				signed char _t82;
				signed int _t89;
				signed int _t92;
				signed int _t96;
				intOrPtr _t97;
				signed char _t98;
				signed int _t99;
				void* _t101;
				signed int* _t102;
				signed int* _t104;
				signed int* _t106;
				signed int* _t107;
				signed int* _t108;
				signed int* _t109;

				_t102 = _t101 - 0x2c;
				_t52 = E6DB248D0(__eflags);
				if(_t52 == 0) {
					return 0xb;
				} else {
					_t96 = _t52;
					if(_a4 != 0) {
						 *_a4 =  *((intOrPtr*)(_t52 + 0xb4));
					}
					 *(_t96 + 0x68) = 0;
					_t89 = 0;
					 *(_t96 + 0x24) = 1;
					_t97 =  *0x6db2f188;
					 *((intOrPtr*)(_t96 + 4)) = _a16;
					 *(_t96 + 0x14) = 0xffffffff;
					 *((intOrPtr*)(_t96 + 8)) = _a12;
					while(1) {
						_v48 = 0;
						_v52 = 0;
						_v56 = 1;
						 *_t102 = 0;
						_t56 = CreateEventA(??, ??, ??, ??);
						 *(_t96 + 0x18) = _t56;
						_t104 = _t102 - 0x10;
						if(_t56 != 0) {
							break;
						}
						if(_t89 == 0) {
							 *_t104 = 0;
							Sleep(??);
							_t102 = _t104 - 4;
							goto L7;
						} else {
							 *_t104 = 0x14;
							Sleep(??);
							_t104 = _t104 - 4;
							if(_t89 != 4) {
								L7:
								_t89 = _t89 + 1;
								continue;
							}
						}
						break;
					}
					 *(_t96 + 0x1c) = 0xffffffff;
					_t16 = _t96 + 0x38; // 0x38
					_t90 = _t16;
					E6DB24A20(_t16, _t16, _t96, _t97);
					_t91 =  *(_t96 + 0x18);
					 *_t96 = 0xbab1f00d;
					 *(_t96 + 0x6c) = 0;
					 *(_t96 + 0x64) = 0;
					__eflags =  *(_t96 + 0x18);
					if( *(_t96 + 0x18) == 0) {
						L25:
						__eflags = _a4;
						if(_a4 != 0) {
							 *_a4 = 0;
						}
						E6DB24650(_t96);
						return 0xb;
					} else {
						_t98 = 0;
						__eflags = _a8;
						if(_a8 != 0) {
							_t82 =  *_a8;
							_t98 = _a8[8];
							 *(_t96 + 0x24) = _t82;
							__eflags = _t82 & 0x00000008;
							if((_t82 & 0x00000008) != 0) {
								 *(_t96 + 0x6c) =  *(E6DB24AD0(_t90, _t91, _t96, _t98) + 0x6c);
							} else {
								 *(_t96 + 0x6c) =  *(_a8 + 0xc);
							}
						}
						_v56 = _t98;
						_v40 = 0;
						_v44 = 4;
						_v48 = _t96;
						_v52 = E6DB24F70;
						 *_t104 = 0;
						_t64 =  *0x6db2f25c();
						_t99 = _t64;
						__eflags = _t64 - 1 - 0xfffffffd;
						if(_t64 - 1 > 0xfffffffd) {
							_t66 =  *(_t96 + 0x18);
							__eflags = _t66;
							if(_t66 != 0) {
								 *_t104 = _t66;
								CloseHandle(??);
								_t104 = _t104 - 4;
							}
							_t45 = _t96 + 0x1c; // 0x1c
							 *_t104 = _t45;
							E6DB23470();
							E6DB24A20(_t90, _t90, _t96, _t99);
							 *(_t96 + 0x18) = 0;
							 *(_t96 + 0x14) = 0;
							goto L25;
						} else {
							_t92 =  *(_t96 + 0x6c);
							_t72 = 0xfffffff1;
							__eflags = _t92 - 0xfffffff2;
							if(_t92 >= 0xfffffff2) {
								_t72 = 0xfffffffe;
								__eflags = _t92 - 0xffffffff;
								if(_t92 >= 0xffffffff) {
									_t72 = 0xf;
									__eflags = _t92 - 0xe;
									if(_t92 <= 0xe) {
										__eflags = _t92 - 2;
										_t72 =  <=  ? _t92 : 2;
									}
								}
							}
							_v56 = _t72;
							 *_t104 = _t99;
							SetThreadPriority(??, ??);
							_t106 = _t104 - 8;
							 *_t106 =  *(_t96 + 0x18);
							ResetEvent(??);
							_t107 = _t106 - 4;
							__eflags =  *(_t96 + 0x24) & 0x00000004;
							if(( *(_t96 + 0x24) & 0x00000004) != 0) {
								 *(_t96 + 0x14) = 0;
								 *_t107 = _t99;
								ResumeThread(??);
								_t108 = _t107 - 4;
								 *_t108 = _t99;
								CloseHandle(??);
								_t109 = _t108 - 4;
							} else {
								 *(_t96 + 0x14) = _t99;
								 *_t107 = _t99;
								ResumeThread(??);
								_t109 = _t107 - 4;
							}
							 *_t109 = 0;
							Sleep(??);
							__eflags = 0;
							return 0;
						}
					}
				}
			}

0x6db26264
0x6db26267
0x6db2626e
0x6db264ec
0x6db26274
0x6db26278
0x6db2627c
0x6db26288
0x6db26288
0x6db2628e
0x6db26295
0x6db26297
0x6db2629e
0x6db262a4
0x6db262ab
0x6db262b8
0x6db262bb
0x6db262bb
0x6db262c3
0x6db262cb
0x6db262d3
0x6db262da
0x6db262dc
0x6db262df
0x6db262e4
0x00000000
0x00000000
0x6db262e8
0x6db26300
0x6db26307
0x6db2630d
0x00000000
0x6db262ea
0x6db262ea
0x6db262f1
0x6db262f3
0x6db262f9
0x6db262fb
0x6db262fb
0x00000000
0x6db262fb
0x6db262f9
0x00000000
0x6db262e8
0x6db26318
0x6db2631f
0x6db2631f
0x6db26324
0x6db26329
0x6db2632c
0x6db26332
0x6db26339
0x6db26340
0x6db26342
0x6db2649b
0x6db2649f
0x6db264a1
0x6db264a7
0x6db264a7
0x6db264af
0x6db264c0
0x6db26348
0x6db2634c
0x6db2634e
0x6db26350
0x6db2635a
0x6db2635c
0x6db2635f
0x6db26362
0x6db26364
0x6db264d0
0x6db2636a
0x6db26371
0x6db26371
0x6db26364
0x6db26374
0x6db26378
0x6db26380
0x6db26388
0x6db2638c
0x6db26394
0x6db2639b
0x6db263a1
0x6db263a6
0x6db263a9
0x6db26468
0x6db2646b
0x6db2646d
0x6db2646f
0x6db26472
0x6db26478
0x6db26478
0x6db2647b
0x6db2647e
0x6db26481
0x6db26488
0x6db2648d
0x6db26494
0x00000000
0x6db263af
0x6db263af
0x6db263b2
0x6db263b7
0x6db263ba
0x6db26438
0x6db2643d
0x6db26440
0x6db26446
0x6db2644b
0x6db2644e
0x6db26454
0x6db2645c
0x6db2645c
0x6db2644e
0x6db26440
0x6db263bc
0x6db263c0
0x6db263c3
0x6db263cc
0x6db263cf
0x6db263d2
0x6db263d8
0x6db263db
0x6db263df
0x6db26410
0x6db26417
0x6db2641a
0x6db26420
0x6db26423
0x6db26426
0x6db2642c
0x6db263e1
0x6db263e1
0x6db263e4
0x6db263e7
0x6db263ed
0x6db263ed
0x6db263f0
0x6db263f7
0x6db263fd
0x6db26409
0x6db26409
0x6db263a9
0x6db26342

APIs

Part of subcall function 6DB248D0: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24B15,?,?,?,?,?,?,?,?,?,?,?), ref: 6DB248DC
Part of subcall function 6DB248D0: pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB2491C

CreateEventA.KERNEL32 ref: 6DB262DA
Sleep.KERNEL32 ref: 6DB262F1
Sleep.KERNEL32 ref: 6DB26307

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Sleep$CreateEventpthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 2615191421-0
Opcode ID: c9edfb8e1e7a06cc57883afa8ca61b5125c9a0e4fad0f49c2685a0b24000226e
Instruction ID: fd0cd4c3f8b3dd97ff3d810b4bc0a551ce04c84b99eb01424f104296abb52eb1
Opcode Fuzzy Hash: c9edfb8e1e7a06cc57883afa8ca61b5125c9a0e4fad0f49c2685a0b24000226e
Instruction Fuzzy Hash: 9B615CB65087429FD7009F29D58872ABBF0FF4A324F014629E9A987788D735E854CFD2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB215B0 Relevance: 18.1, APIs: 12, Instructions: 94
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 6DB21410: pthread_spin_lock.LIBWINPTHREAD-1(?,74E06490,?,6DB215DF), ref: 6DB21427
Part of subcall function 6DB21410: pthread_spin_unlock.LIBWINPTHREAD-1(?,74E06490,?,6DB215DF), ref: 6DB2144C

Sleep.KERNEL32 ref: 6DB215CF
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB215FD
sem_destroy.LIBWINPTHREAD-1 ref: 6DB21605

Part of subcall function 6DB26CA0: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,?,?,?,?,6DB2160A), ref: 6DB26CC3
Part of subcall function 6DB26CA0: CloseHandle.KERNEL32(?,?,?,?,?,?,6DB2160A), ref: 6DB26CD8
Part of subcall function 6DB26CA0: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,6DB2160A), ref: 6DB26CF5
Part of subcall function 6DB26CA0: Sleep.KERNEL32(?,?,?,?,?,?,?,6DB2160A), ref: 6DB26D07
Part of subcall function 6DB26CA0: pthread_mutex_destroy.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6DB2160A), ref: 6DB26D1F
Part of subcall function 6DB26CA0: ??3@YAXPAX@Z.MSVCRT ref: 6DB26D2C

sem_destroy.LIBWINPTHREAD-1 ref: 6DB21618
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB21628
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB21630
??3@YAXPAX@Z.MSVCRT ref: 6DB2164A
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB21669
sem_init.LIBWINPTHREAD-1 ref: 6DB216CF
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB216DD

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$??3@Sleeppthread_mutex_destroypthread_mutex_locksem_destroy$CloseHandlepthread_spin_lockpthread_spin_unlocksem_init
String ID:
API String ID: 2848882300-0
Opcode ID: 823494b01a809c74e2a400cdb116f71312e5f16ab6be109480669941e2c1ee83
Instruction ID: 0e084fb9dafa46512f947f4a81c14c6bee20920191ba7465c526d32ab2195fed
Opcode Fuzzy Hash: 823494b01a809c74e2a400cdb116f71312e5f16ab6be109480669941e2c1ee83
Instruction Fuzzy Hash: 8031F6B65087458FC711AF29D48062EBBF0EF88358F058A2DE9DC97348E735E4468B82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB21FA0 Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 184
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 25%

			E6DB21FA0(void* __ecx, char _a4, signed int _a8, signed int _a12) {
				intOrPtr _v32;
				char _v36;
				signed int _v48;
				signed int _v52;
				signed int _v56;
				void* __edi;
				void* __ebp;
				signed int _t34;
				signed int _t35;
				intOrPtr _t37;
				signed int _t38;
				signed int _t39;
				signed int _t42;
				signed int _t45;
				signed int _t46;
				signed int _t47;
				signed int _t48;
				signed int _t50;
				signed int _t51;
				signed int _t53;
				signed int _t55;
				signed int _t56;
				signed int _t57;
				signed int _t62;
				void* _t63;
				void* _t64;
				signed int _t66;
				char _t67;
				signed int _t68;
				signed int _t70;
				void* _t71;
				intOrPtr* _t72;
				void* _t78;

				_t63 = __ecx;
				_t72 = _t71 - 0x2c;
				_t76 = _a8 - 1;
				_t67 = _a4;
				_t62 = _a12;
				if(_a8 == 1) {
					_v56 = _t62;
					 *_t72 = _t67;
					_t34 = E6DB22DC0();
					__eflags = _t34 - 0x80;
					if(_t34 == 0x80) {
						L11:
						 *_t72 = _t67;
						_v56 = 0;
						_t35 = WaitForSingleObject(??, ??);
						_t72 = _t72 - 8;
						_t68 = _a8;
						__eflags = _t35;
						if(_t35 == 0) {
							goto L13;
						}
					} else {
						__eflags = _t34 - 0x102;
						if(_t34 != 0x102) {
							_t68 = 0x16;
							__eflags = _t34;
							if(_t34 == 0) {
								goto L13;
							}
						} else {
							_a8 = 0x8a;
							goto L11;
						}
					}
					goto L14;
				} else {
					_v36 = _t67;
					_t37 = E6DB25830(_t76);
					_v32 = _t37;
					if(_t37 == 0) {
						_t70 = 0x14;
						__eflags = _t62 - 0xffffffff;
						if(_t62 == 0xffffffff) {
							while(1) {
								_v56 = 0x28;
								 *_t72 = _t67;
								_t38 = E6DB22DC0();
								__eflags = _t38 - 0x80;
								if(_t38 == 0x80) {
									break;
								}
								__eflags = _t38 - 0x102;
								if(_t38 == 0x102) {
									_t45 = E6DB259A0();
									__eflags = _t45;
									if(_t45 != 0) {
										goto L49;
									} else {
										continue;
									}
								} else {
									__eflags = _t38;
									if(_t38 == 0) {
										goto L13;
									} else {
										_t46 = E6DB259A0();
										__eflags = _t46;
										if(_t46 != 0) {
											L49:
											__eflags = _a8 - 2;
											if(__eflags == 0) {
												goto L33;
											} else {
												goto L50;
											}
										} else {
											goto L33;
										}
									}
								}
								goto L53;
							}
							_t39 = E6DB259A0();
							__eflags = _t39;
							if(_t39 != 0) {
								goto L49;
							} else {
								 *_t72 = _t67;
								_v56 = 0;
								_t42 = WaitForSingleObject(??, ??);
								_t72 = _t72 - 8;
								__eflags = _t42;
								_t68 = (_t42 & 0xffffff00 | _t42 != 0x00000000) & 0x000000ff;
								goto L14;
							}
						} else {
							while(1) {
								__eflags = _t62 - _t70;
								 *_t72 = _t67;
								_t66 =  <=  ? _t62 : _t70;
								_v56 = _t66;
								_t47 = E6DB22DC0();
								__eflags = _t47 - 0x80;
								if(_t47 == 0x80) {
									break;
								}
								__eflags = _t47 - 0x102;
								if(_t47 == 0x102) {
									_t62 = _t62 - _t66;
									__eflags = _t62;
									if(_t62 != 0) {
										_t50 = E6DB259A0();
										__eflags = _t50;
										if(_t50 != 0) {
											goto L33;
										} else {
											_t70 = _t66;
											continue;
										}
									} else {
										_v56 = 0;
										 *_t72 = _t67;
										_t51 = WaitForSingleObject(??, ??);
										_t72 = _t72 - 8;
										__eflags = _t51;
										if(_t51 == 0) {
											goto L13;
										} else {
											_t48 = 1;
											_t68 = 0x8a;
											goto L36;
										}
										goto L14;
									}
								} else {
									_t68 = 0x16;
									__eflags = _t47;
									if(_t47 == 0) {
										_t68 = 0;
										__eflags = 0;
										goto L35;
									} else {
										L25:
										_t48 = 1;
										__eflags = _t62 - _t70;
										if(_t62 <= _t70) {
											L36:
											__eflags = _a8 - 2;
											if(_a8 != 2) {
												__eflags = _t48;
												if(__eflags != 0) {
													E6DB25AD0(_t63, _t66, _t70, __eflags);
												}
											}
											goto L14;
										} else {
											_t47 = E6DB259A0();
											__eflags = _t47;
											if(_t47 != 0) {
												goto L33;
											} else {
												L35:
												__eflags = _t68;
												_t24 = _t68 != 0;
												__eflags = _t24;
												_t48 = _t47 & 0xffffff00 | _t24;
												goto L36;
											}
										}
									}
								}
								goto L53;
							}
							_t68 = 1;
							goto L25;
						}
					} else {
						while(1) {
							_v48 = _t62;
							_v52 = 0;
							_v56 =  &_v36;
							 *_t72 = 2;
							_t53 = E6DB22E60();
							_t78 = _t53 - 0x80;
							if(_t78 == 0) {
								break;
							}
							if(_t78 > 0) {
								_t68 = 0x8a;
								__eflags = _t53 - 0x102;
								if(_t53 != 0x102) {
									goto L47;
								} else {
									L16:
									_v56 = 0;
									 *_t72 = _v36;
									_t55 = WaitForSingleObject(??, ??);
									_t72 = _t72 - 8;
									__eflags = _t55;
									if(_t55 == 0) {
										goto L13;
									} else {
										__eflags = _a8 - 2;
										_t20 = _a8 != 2;
										__eflags = _t20;
										_t56 = _t55 & 0xffffff00 | _t20;
										goto L18;
									}
								}
							} else {
								if(_t53 == 0) {
									L13:
									_t68 = 0;
									__eflags = 0;
									goto L14;
								} else {
									if(_t53 != 1) {
										L47:
										__eflags = _a8 - 2;
										_t68 = 0x16;
										_t56 = _t53 & 0xffffff00 | _a8 != 0x00000002;
										L18:
										__eflags = _t56;
										if(_t56 == 0) {
											goto L14;
										} else {
											_t57 = E6DB259A0();
											__eflags = _t57;
											if(_t57 != 0) {
												L33:
												return 0x16;
											} else {
												return _t68;
											}
										}
									} else {
										 *_t72 = _v32;
										ResetEvent(??);
										_t72 = _t72 - 4;
										_t81 = _a8 - 2;
										if(_a8 != 2) {
											L50:
											E6DB25AD0(_t63, _t64, _t70, __eflags);
											_t68 = 0x16;
											L14:
											return _t68;
										} else {
											E6DB25AD0(_t63, _t64, _t70, _t81);
											continue;
										}
									}
								}
							}
							goto L53;
						}
						_t68 = 1;
						goto L16;
					}
				}
				L53:
			}

0x6db21fa0
0x6db21fa4
0x6db21fa7
0x6db21fac
0x6db21fb0
0x6db21fb4
0x6db22030
0x6db22034
0x6db22037
0x6db2203c
0x6db22041
0x6db22056
0x6db22056
0x6db22059
0x6db22061
0x6db22067
0x6db2206a
0x6db2206e
0x6db22070
0x00000000
0x00000000
0x6db22043
0x6db22043
0x6db22048
0x6db22220
0x6db22225
0x6db22227
0x00000000
0x6db2222d
0x6db2204e
0x6db2204e
0x00000000
0x6db2204e
0x6db22048
0x00000000
0x6db21fb6
0x6db21fb6
0x6db21fba
0x6db21fbf
0x6db21fc5
0x6db220e0
0x6db220e5
0x6db220e8
0x6db2213d
0x6db2213d
0x6db22145
0x6db22148
0x6db2214d
0x6db22152
0x00000000
0x00000000
0x6db22158
0x6db2215d
0x6db22130
0x6db22135
0x6db22137
0x00000000
0x00000000
0x00000000
0x00000000
0x6db2215f
0x6db2215f
0x6db22161
0x00000000
0x6db22167
0x6db22167
0x6db2216c
0x6db2216e
0x6db22260
0x6db22260
0x6db22265
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x6db2216e
0x6db22161
0x00000000
0x6db2215d
0x6db221f0
0x6db221f5
0x6db221f7
0x00000000
0x6db221f9
0x6db221f9
0x6db221fc
0x6db22204
0x6db2220a
0x6db2220d
0x6db22215
0x00000000
0x6db22215
0x6db220ea
0x6db220ea
0x6db220ea
0x6db220ee
0x6db220f1
0x6db220f4
0x6db220f8
0x6db220fd
0x6db22102
0x00000000
0x00000000
0x6db22108
0x6db2210d
0x6db221b0
0x6db221b0
0x6db221b2
0x6db2227a
0x6db2227f
0x6db22281
0x00000000
0x6db22287
0x6db22287
0x00000000
0x6db22287
0x6db221b8
0x6db221b8
0x6db221c0
0x6db221c3
0x6db221c9
0x6db221cc
0x6db221ce
0x00000000
0x6db221d4
0x6db221d4
0x6db221d9
0x00000000
0x6db221d9
0x00000000
0x6db221ce
0x6db22113
0x6db22113
0x6db22118
0x6db2211a
0x6db22188
0x6db22188
0x00000000
0x6db2211c
0x6db2211c
0x6db2211c
0x6db22121
0x6db22123
0x6db22190
0x6db22190
0x6db22195
0x6db2219b
0x6db2219d
0x6db221a3
0x6db221a3
0x6db2219d
0x00000000
0x6db22125
0x6db22125
0x6db2212a
0x6db2212c
0x00000000
0x6db2212e
0x6db2218a
0x6db2218a
0x6db2218c
0x6db2218c
0x6db2218c
0x00000000
0x6db2218c
0x6db2212c
0x6db22123
0x6db2211a
0x00000000
0x6db2210d
0x6db221e0
0x00000000
0x6db221e0
0x6db21fcb
0x6db21fcb
0x6db21fcf
0x6db21fd3
0x6db21fdb
0x6db21fdf
0x6db21fe6
0x6db21feb
0x6db21ff0
0x00000000
0x00000000
0x6db21ff6
0x6db22088
0x6db2208d
0x6db22092
0x00000000
0x6db22098
0x6db22098
0x6db2209c
0x6db220a4
0x6db220a7
0x6db220ad
0x6db220b0
0x6db220b2
0x00000000
0x6db220b4
0x6db220b4
0x6db220b9
0x6db220b9
0x6db220b9
0x00000000
0x6db220b9
0x6db220b2
0x6db21ffc
0x6db21ffe
0x6db22078
0x6db22078
0x6db22078
0x00000000
0x6db22000
0x6db22003
0x6db22238
0x6db22238
0x6db2223d
0x6db22242
0x6db220bc
0x6db220bc
0x6db220be
0x00000000
0x6db220c0
0x6db220c0
0x6db220c5
0x6db220c7
0x6db22174
0x6db22182
0x6db220cd
0x6db220d6
0x6db220d6
0x6db220c7
0x6db22009
0x6db2200d
0x6db22010
0x6db22016
0x6db22019
0x6db2201e
0x6db2226b
0x6db2226b
0x6db22270
0x6db2207a
0x6db22083
0x6db22024
0x6db22024
0x00000000
0x6db22024
0x6db2201e
0x6db22003
0x6db21ffe
0x00000000
0x6db21ff6
0x6db22250
0x00000000
0x6db22250
0x6db21fc5
0x00000000

APIs

pthread_getevent.LIBWINPTHREAD-1 ref: 6DB21FBA
ResetEvent.KERNEL32 ref: 6DB22010
pthread_testcancel.LIBWINPTHREAD-1 ref: 6DB22024
WaitForSingleObject.KERNEL32 ref: 6DB22061
pthread_testcancel.LIBWINPTHREAD-1 ref: 6DB221A3

Part of subcall function 6DB22E60: WaitForMultipleObjects.KERNEL32 ref: 6DB22ECC

WaitForSingleObject.KERNEL32 ref: 6DB220A7
pthread_testcancel.LIBWINPTHREAD-1 ref: 6DB2226B

Strings

(, xrefs: 6DB2213D

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Waitpthread_testcancel$ObjectSingle$EventMultipleObjectsResetpthread_getevent
String ID: (
API String ID: 2434277775-3887548279
Opcode ID: a9e34fbe320050fcc58a6adeed4c42ae3700ee1000ee05edd0fe3b94637afac8
Instruction ID: bbecdd4c34e64ed5192158a18f7dbab224fc520c91ba09c98a48faffe7692015
Opcode Fuzzy Hash: a9e34fbe320050fcc58a6adeed4c42ae3700ee1000ee05edd0fe3b94637afac8
Instruction Fuzzy Hash: 5151903392838286E7315A65C94633FB6F0EB46755F81492DEA8CD728CD73AC845C793

Uniqueness

Uniqueness Score: -1.00%

Function 6DB21DD0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 94
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

calloc.MSVCRT ref: 6DB21E02
CreateSemaphoreA.KERNEL32 ref: 6DB21E58
CreateSemaphoreA.KERNEL32 ref: 6DB21E7F
RtlInitializeCriticalSection.NTDLL ref: 6DB21E9E
RtlInitializeCriticalSection.NTDLL ref: 6DB21EA9
RtlInitializeCriticalSection.NTDLL ref: 6DB21EB4

Strings

l, xrefs: 6DB21DF3

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CriticalInitializeSection$CreateSemaphore$calloc
String ID: l
API String ID: 2075313795-2517025534
Opcode ID: d55052bee798e7e4859d250c3cc2e35bb27fb2a2aa6c3ab6aa4f19a88e783a63
Instruction ID: 83ef0d40065a2bf9cd7d8291ee13ecc606bf2f51ecf09a37343182969f41eff2
Opcode Fuzzy Hash: d55052bee798e7e4859d250c3cc2e35bb27fb2a2aa6c3ab6aa4f19a88e783a63
Instruction Fuzzy Hash: 5D315EB25043408FEB00BF29D58836ABBF4EF44364F458A6DD8988B389E779D444CF82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB216F0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 94
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

calloc.MSVCRT ref: 6DB21722
pthread_mutex_init.LIBWINPTHREAD-1 ref: 6DB2176A
sem_init.LIBWINPTHREAD-1 ref: 6DB2178C
sem_init.LIBWINPTHREAD-1 ref: 6DB217AA

Strings

$, xrefs: 6DB21713

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: sem_init$callocpthread_mutex_init
String ID: $
API String ID: 2903874097-3993045852
Opcode ID: 8ccfbfe84c1fc9c689a4110a86c9ae69be8d04506221a01687fb4f4cbab6dfc5
Instruction ID: 0b9545635de6330895af7cb24edc88c5768ebc6e1473b1b5332f8ce2767ef473
Opcode Fuzzy Hash: 8ccfbfe84c1fc9c689a4110a86c9ae69be8d04506221a01687fb4f4cbab6dfc5
Instruction Fuzzy Hash: 17314DB66093858BD700AF29D48032FB7E4FF84798F09486DE99C9B309E775D805CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB22340 Relevance: 16.6, APIs: 11, Instructions: 127
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlTryEnterCriticalSection.NTDLL ref: 6DB223AA
CloseHandle.KERNEL32 ref: 6DB223EB
CloseHandle.KERNEL32 ref: 6DB223F6
RtlLeaveCriticalSection.NTDLL ref: 6DB22402
RtlDeleteCriticalSection.NTDLL ref: 6DB22414
RtlDeleteCriticalSection.NTDLL ref: 6DB2241C
RtlDeleteCriticalSection.NTDLL ref: 6DB22427
??3@YAXPAX@Z.MSVCRT ref: 6DB2242F
pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB2247C
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB22499

Part of subcall function 6DB22290: RtlEnterCriticalSection.NTDLL ref: 6DB222B0
Part of subcall function 6DB22290: RtlLeaveCriticalSection.NTDLL ref: 6DB222CC

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CriticalSection$Delete$CloseEnterHandleLeave$??3@pthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 1387492096-0
Opcode ID: 06d20d8d06d604996fb74c03be7f9fde0a73c025ebe3dec0d4a66be5750fafd7
Instruction ID: 194c6f6c05b3be186fdaec45b399f040d92da28fd13ba9edf8f842e1ba7b3c13
Opcode Fuzzy Hash: 06d20d8d06d604996fb74c03be7f9fde0a73c025ebe3dec0d4a66be5750fafd7
Instruction Fuzzy Hash: FD415EB26042488FDB00AF79E48166AB7F0FF85354F020979E999CB348E731E845CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB26600 Relevance: 16.6, APIs: 11, Instructions: 101
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 29%

			E6DB26600(void* __ecx, void* __ebp, void* __eflags, intOrPtr _a4, intOrPtr* _a8) {
				char _v16;
				char* _v40;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* _t21;
				intOrPtr _t24;
				int _t25;
				void* _t28;
				void* _t30;
				intOrPtr _t31;
				intOrPtr _t33;
				long _t44;
				void* _t46;
				void* _t47;
				intOrPtr _t52;
				signed int _t54;
				intOrPtr _t55;
				void* _t57;
				intOrPtr* _t58;

				_t47 = __ecx;
				_t58 = _t57 - 0x20;
				 *_t58 = 0x6db2a018;
				_t52 = _a4;
				E6DB22F90();
				_t21 = E6DB24460(_t52);
				if(_t21 == 0) {
					L16:
					 *_t58 = 0x6db2a018;
					E6DB232E0();
					return 3;
				} else {
					_t46 = _t21;
					_t24 =  *((intOrPtr*)(_t21 + 0x14));
					if(_t24 == 0) {
						goto L16;
					} else {
						 *_t58 = _t24;
						_v40 =  &_v16;
						_t25 = GetHandleInformation(??, ??);
						_t58 = _t58 - 8;
						if(_t25 == 0) {
							goto L16;
						} else {
							_t54 =  *(_t46 + 0x24) & 0x00000004;
							if(_t54 != 0) {
								 *_t58 = 0x6db2a018;
								E6DB232E0();
								return 0x16;
							} else {
								_t28 = E6DB24AD0(_t46, _t47, _t52, _t54);
								if(_t28 != 0) {
									_t54 =  *(_t28 + 0xb4);
								}
								if(_t52 == _t54) {
									 *_t58 = 0x6db2a018;
									E6DB232E0();
									_t30 = 0x24;
								} else {
									_t31 =  *((intOrPtr*)(_t46 + 0x14));
									if( *((intOrPtr*)(_t46 + 0x68)) != 0) {
										L10:
										 *_t58 = _t31;
										_t55 =  *0x6db2f184;
										CloseHandle(??);
										_t33 =  *((intOrPtr*)(_t46 + 0x18));
										_t58 = _t58 - 4;
										if(_t33 != 0) {
											 *_t58 = _t33;
											CloseHandle(??);
											_t58 = _t58 - 4;
										}
										 *((intOrPtr*)(_t46 + 0x18)) = 0;
										if(_a8 != 0) {
											 *_a8 =  *((intOrPtr*)(_t46 + 4));
										}
										_t16 = _t46 + 0x1c; // 0x1c
										 *_t58 = _t16;
										E6DB23470();
										_t17 = _t46 + 0x38; // 0x38
										E6DB24A20(_t17, _t46, _t52, _t55);
										E6DB24650(_t46);
										 *_t58 = 0x6db2a018;
										E6DB232E0();
										_t30 = 0;
									} else {
										_v40 = 0;
										 *_t58 = _t31;
										_t44 = WaitForSingleObject(??, ??);
										_t58 = _t58 - 8;
										if(_t44 != 0) {
											if( *((intOrPtr*)(_t46 + 0x68)) != 0) {
												goto L9;
											} else {
												 *_t58 = 0x6db2a018;
												E6DB232E0();
												_t30 = 0x10;
											}
										} else {
											L9:
											_t31 =  *((intOrPtr*)(_t46 + 0x14));
											goto L10;
										}
									}
								}
								return _t30;
							}
						}
					}
				}
			}

0x6db26600
0x6db26603
0x6db26606
0x6db2660d
0x6db26611
0x6db26618
0x6db2661f
0x6db26700
0x6db26700
0x6db26707
0x6db26717
0x6db26625
0x6db26625
0x6db26627
0x6db2662c
0x00000000
0x6db26632
0x6db26636
0x6db26639
0x6db2663d
0x6db26643
0x6db26648
0x00000000
0x6db2664e
0x6db26651
0x6db26654
0x6db26720
0x6db26727
0x6db26737
0x6db2665a
0x6db2665a
0x6db26661
0x6db26663
0x6db26663
0x6db2666b
0x6db26760
0x6db26767
0x6db2676c
0x6db26671
0x6db26674
0x6db26679
0x6db2669a
0x6db2669a
0x6db2669d
0x6db266a3
0x6db266a5
0x6db266a8
0x6db266ad
0x6db266af
0x6db266b2
0x6db266b4
0x6db266b4
0x6db266bb
0x6db266c4
0x6db266cd
0x6db266cd
0x6db266cf
0x6db266d2
0x6db266d5
0x6db266da
0x6db266dd
0x6db266e4
0x6db266e9
0x6db266f0
0x6db266f5
0x6db2667b
0x6db2667b
0x6db26683
0x6db26686
0x6db2668c
0x6db26691
0x6db26745
0x00000000
0x6db2674b
0x6db2674b
0x6db26752
0x6db26757
0x6db26757
0x6db26697
0x6db26697
0x6db26697
0x00000000
0x6db26697
0x6db26691
0x6db26679
0x6db266fd
0x6db266fd
0x6db26654
0x6db26648
0x6db2662c

APIs

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB26611
GetHandleInformation.KERNEL32 ref: 6DB2663D
WaitForSingleObject.KERNEL32 ref: 6DB26686
CloseHandle.KERNEL32 ref: 6DB266A3
CloseHandle.KERNEL32 ref: 6DB266B2
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB266D5
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB266F0
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB26707
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB26727

Part of subcall function 6DB24AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6DB25ADA,?,?,?,?,6DB26ADD), ref: 6DB24AED

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Handlepthread_mutex_unlock$Close$InformationObjectSingleValueWaitpthread_mutex_destroypthread_mutex_lock
String ID:
API String ID: 3125639524-0
Opcode ID: a8eb37a90fd6334bfa3457fbbe4e583be4275f48b1a4db7766ea574d4e38728c
Instruction ID: b152c0b9dd440b0103ed27bbddcbc866736d1a52b5c1b2a182f52c31e8848c6e
Opcode Fuzzy Hash: a8eb37a90fd6334bfa3457fbbe4e583be4275f48b1a4db7766ea574d4e38728c
Instruction Fuzzy Hash: 4B3119726082818BEB00AF69E58567F7BE4EF45354F02446DDD889B20CEB31E845CBD3

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25130 Relevance: 15.8, APIs: 7, Strings: 2, Instructions: 49threadCOMMON

Download Yara Rule

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6DB25152

Part of subcall function 6DB24C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C36
Part of subcall function 6DB24C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C4B

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6DB25161
GetCurrentThreadId.KERNEL32 ref: 6DB25168
__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6DB25177
printf.MSVCRT ref: 6DB2519B
GetCurrentThreadId.KERNEL32 ref: 6DB251B0
printf.MSVCRT ref: 6DB251D1

Strings

T%p %d %s, xrefs: 6DB251CA
T%p %d V=%0X H=%p %s, xrefs: 6DB25194

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: __pth_gpointer_locked$CurrentThreadprintf$pthread_mutex_lockpthread_mutex_unlock
String ID: T%p %d %s$T%p %d V=%0X H=%p %s
API String ID: 2614883391-2059990036
Opcode ID: 05adc4b0aeaae20bdb2e1e53786f861f9af47286d10b225636b485883c249d16
Instruction ID: 85e394ca1ae38c6c3a7543a9c4818ddd8cd247f8eb728e34e14098dbd88f15cf
Opcode Fuzzy Hash: 05adc4b0aeaae20bdb2e1e53786f861f9af47286d10b225636b485883c249d16
Instruction Fuzzy Hash: 3711F5B6909340AFD740EF69E08596EBBF0FF89611F41981EF98883308DB30D8408B93

Uniqueness

Uniqueness Score: -1.00%

Function 6DB26CA0 Relevance: 15.1, APIs: 10, Instructions: 58sleepCOMMON

Download Yara Rule

APIs

pthread_mutex_lock.LIBWINPTHREAD-1(?,?,?,?,?,?,6DB2160A), ref: 6DB26CC3
CloseHandle.KERNEL32(?,?,?,?,?,?,6DB2160A), ref: 6DB26CD8
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,6DB2160A), ref: 6DB26CF5
Sleep.KERNEL32(?,?,?,?,?,?,?,6DB2160A), ref: 6DB26D07
Sleep.KERNEL32(?,?,?,?,?,?,?,?,6DB2160A), ref: 6DB26D17
pthread_mutex_destroy.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6DB2160A), ref: 6DB26D1F

Part of subcall function 6DB23470: CloseHandle.KERNEL32(?,?,?,74E06490,6DB26D24,?,?,?,?,?,?,?,?,6DB2160A), ref: 6DB2348D
Part of subcall function 6DB23470: ??3@YAXPAX@Z.MSVCRT ref: 6DB23499

??3@YAXPAX@Z.MSVCRT ref: 6DB26D2C
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,6DB2160A), ref: 6DB26D3E
_errno.MSVCRT ref: 6DB26D43
_errno.MSVCRT ref: 6DB26D56

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ??3@CloseHandleSleep_errnopthread_mutex_unlock$pthread_mutex_destroypthread_mutex_lock
String ID:
API String ID: 1604885533-0
Opcode ID: 2833b7d8fbab10e055ee870da06da9937e42e2c76332f454fec23e455026274c
Instruction ID: 6c8abf26320aa0528fc72b070ebe291d1f10cc5cbf471027748c2e86d597d3ae
Opcode Fuzzy Hash: 2833b7d8fbab10e055ee870da06da9937e42e2c76332f454fec23e455026274c
Instruction Fuzzy Hash: 671182B24087898BD7117F3AC94423DBBB0EF02354F124A6CD8E94B789DB35A400CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB237D0 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 38COMMON

Download Yara Rule

APIs

pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6DB23FEE), ref: 6DB237E0
pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6DB23FEE), ref: 6DB23805
fprintf.MSVCRT ref: 6DB23842
exit.MSVCRT ref: 6DB2384E

Strings

(, xrefs: 6DB2381F
/var/tmp/build/mingw-w64-0a1d495478d8/mingw-w64-libraries/winpthreads/src/rwlock.c, xrefs: 6DB23827
Assertion failed: (%s), file %s, line %d, xrefs: 6DB23837
(((rwlock_t *)*rwl)->valid == LIFE_RWLOCK) && (((rwlock_t *)*rwl)->busy > 0), xrefs: 6DB2382F

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: exitfprintfpthread_spin_lockpthread_spin_unlock
String ID: ($(((rwlock_t *)*rwl)->valid == LIFE_RWLOCK) && (((rwlock_t *)*rwl)->busy > 0)$/var/tmp/build/mingw-w64-0a1d495478d8/mingw-w64-libraries/winpthreads/src/rwlock.c$Assertion failed: (%s), file %s, line %d
API String ID: 2153800997-3539959846
Opcode ID: a50117028e217b5af067ef015d4177adf24ad101d4036e7ff2e61202d724a683
Instruction ID: 962b7e52183f0c9f0e280ebc95cdcc0ffed9da0a864de223338529c8430c3e8c
Opcode Fuzzy Hash: a50117028e217b5af067ef015d4177adf24ad101d4036e7ff2e61202d724a683
Instruction Fuzzy Hash: 8A01D7725182508FCB109F64D489B6ABBE4FF45304F02885CE59D9B308C774A8449F93

Uniqueness

Uniqueness Score: -1.00%

Function 6DB256C0 Relevance: 13.6, APIs: 9, Instructions: 78COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6DB256CB

Part of subcall function 6DB24AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6DB25ADA,?,?,?,?,6DB26ADD), ref: 6DB24AED

pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB256E2
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB25700
SetLastError.KERNEL32 ref: 6DB2570C
realloc.MSVCRT ref: 6DB25734
realloc.MSVCRT ref: 6DB2574B
memset.MSVCRT ref: 6DB2577C
memset.MSVCRT ref: 6DB2579B

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ErrorLastmemsetrealloc$Valuepthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 3506545171-0
Opcode ID: 7c772cae3f4a5504b7d343eb857582f2dc99eeeafe7fd50358cf751b59175930
Instruction ID: c2b9eb7cf42a4df46bc99926983495f32315b03bb8f3144bc5b1751cef6e6015
Opcode Fuzzy Hash: 7c772cae3f4a5504b7d343eb857582f2dc99eeeafe7fd50358cf751b59175930
Instruction Fuzzy Hash: F831D4B55083458FCB00DF29D084A6EBBE0FF88744F12896DE9898B319E734D985CF96

Uniqueness

Uniqueness Score: -1.00%

Function 6DB26780 Relevance: 13.6, APIs: 9, Instructions: 69
COMMON

Download Yara Rule

C-Code - Quality: 16%

			E6DB26780(void* __ecx, void* __edi, void* __ebp, void* __eflags, intOrPtr _a4) {
				char _v16;
				char* _v40;
				void* __ebx;
				void* __esi;
				void* _t17;
				intOrPtr _t21;
				int _t22;
				signed int _t23;
				void* _t25;
				intOrPtr _t30;
				void* _t38;
				intOrPtr _t41;
				void* _t42;
				intOrPtr _t43;
				void* _t45;
				intOrPtr* _t46;

				_t42 = __edi;
				_t46 = _t45 - 0x24;
				 *_t46 = _a4;
				_t17 = E6DB24C20();
				 *_t46 = 0x6db2a018;
				_t38 = _t17;
				E6DB22F90();
				if(_t38 == 0) {
					L11:
					 *_t46 = 0x6db2a018;
					E6DB232E0();
					return 3;
				} else {
					_t21 =  *((intOrPtr*)(_t38 + 0x14));
					if(_t21 == 0) {
						goto L11;
					} else {
						 *_t46 = _t21;
						_v40 =  &_v16;
						_t22 = GetHandleInformation(??, ??);
						_t46 = _t46 - 8;
						if(_t22 == 0) {
							goto L11;
						} else {
							_t23 =  *(_t38 + 0x24);
							if((_t23 & 0x00000004) != 0) {
								 *_t46 = 0x6db2a018;
								E6DB232E0();
								_t25 = 0x16;
							} else {
								_t41 =  *((intOrPtr*)(_t38 + 0x14));
								 *((intOrPtr*)(_t38 + 0x14)) = 0;
								 *(_t38 + 0x24) = _t23 | 0x00000004;
								if(_t41 != 0) {
									 *_t46 = _t41;
									_t43 =  *0x6db2f184;
									CloseHandle(??);
									_t46 = _t46 - 4;
									if( *((intOrPtr*)(_t38 + 0x68)) != 0) {
										_t30 =  *((intOrPtr*)(_t38 + 0x18));
										if(_t30 != 0) {
											 *_t46 = _t30;
											CloseHandle(??);
											_t46 = _t46 - 4;
										}
										_t13 = _t38 + 0x1c; // 0x1c
										 *((intOrPtr*)(_t38 + 0x18)) = 0;
										 *_t46 = _t13;
										E6DB23470();
										_t15 = _t38 + 0x38; // 0x38
										E6DB24A20(_t15, _t38, _t42, _t43);
										E6DB24650(_t38);
									}
								}
								 *_t46 = 0x6db2a018;
								E6DB232E0();
								_t25 = 0;
							}
							return _t25;
						}
					}
				}
			}

0x6db26780
0x6db26782
0x6db26789
0x6db2678c
0x6db26791
0x6db26798
0x6db2679a
0x6db267a1
0x6db26848
0x6db26848
0x6db2684f
0x6db2685e
0x6db267a7
0x6db267a7
0x6db267ac
0x00000000
0x6db267b2
0x6db267b6
0x6db267b9
0x6db267bd
0x6db267c3
0x6db267c8
0x00000000
0x6db267ca
0x6db267ca
0x6db267cf
0x6db26860
0x6db26867
0x6db2686c
0x6db267d5
0x6db267d8
0x6db267db
0x6db267e2
0x6db267e7
0x6db267e9
0x6db267ec
0x6db267f2
0x6db267f7
0x6db267fc
0x6db267fe
0x6db26803
0x6db26805
0x6db26808
0x6db2680a
0x6db2680a
0x6db2680d
0x6db26810
0x6db26817
0x6db2681a
0x6db2681f
0x6db26822
0x6db26829
0x6db26829
0x6db267fc
0x6db2682e
0x6db26835
0x6db2683a
0x6db2683a
0x6db26841
0x6db26841
0x6db267c8
0x6db267ac

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6DB2678C

Part of subcall function 6DB24C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C36
Part of subcall function 6DB24C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C4B

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB2679A
GetHandleInformation.KERNEL32 ref: 6DB267BD
CloseHandle.KERNEL32 ref: 6DB267F2
CloseHandle.KERNEL32 ref: 6DB26808
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB2681A
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB26835
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB2684F
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB26867

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$Handle$Closepthread_mutex_lock$Information__pth_gpointer_lockedpthread_mutex_destroy
String ID:
API String ID: 3021062890-0
Opcode ID: 1dd76ca162bcca72b5e06eb51aa11126eef89e21321b182e8e5d78344dc2e6f1
Instruction ID: ad39edda7983b25d203e457c30a752978eb87f10d2492f75d7ccff08cef5848e
Opcode Fuzzy Hash: 1dd76ca162bcca72b5e06eb51aa11126eef89e21321b182e8e5d78344dc2e6f1
Instruction Fuzzy Hash: 932121B29082818BEB00EF79E58567F7BE4EF44204F01486DD9989B20DD735D495CBD3

Uniqueness

Uniqueness Score: -1.00%

Function 6DB26B90 Relevance: 13.6, APIs: 9, Instructions: 67COMMON

Download Yara Rule

APIs

calloc.MSVCRT ref: 6DB26BCA
pthread_mutex_init.LIBWINPTHREAD-1(?,?,?,?,?,6DB216D4), ref: 6DB26BEA
CreateSemaphoreA.KERNEL32 ref: 6DB26C14
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB26C39
??3@YAXPAX@Z.MSVCRT ref: 6DB26C48
_errno.MSVCRT ref: 6DB26C4D
_errno.MSVCRT ref: 6DB26C60
_errno.MSVCRT ref: 6DB26C73
_errno.MSVCRT ref: 6DB26C86

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: _errno$??3@CreateSemaphorecallocpthread_mutex_destroypthread_mutex_init
String ID:
API String ID: 4013580772-0
Opcode ID: 1deb5c23f6e881a6059f7b4609316282df78738b96e5e19c02684afbab245f68
Instruction ID: 1da377eb4f9439b70011117bae9f5b8f821335824b7ca6932a54e3da424f8428
Opcode Fuzzy Hash: 1deb5c23f6e881a6059f7b4609316282df78738b96e5e19c02684afbab245f68
Instruction Fuzzy Hash: 86217F72509381CBD7117F69C94432A7BF4EB46764F068658ECAC5B3D8DB7588008BA2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24A20 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 73
threadCOMMON

Download Yara Rule

C-Code - Quality: 24%

			E6DB24A20(intOrPtr* __eax, void* __ebx, void* __edi, void* __esi) {
				void* _t89;
				int _t91;
				long _t93;
				void* _t95;
				signed int _t97;
				void* _t102;
				void* _t107;
				signed int _t108;
				signed char _t111;
				signed char _t112;
				signed int _t114;
				signed int _t118;
				signed char _t119;
				signed char _t123;
				int _t127;
				int _t132;
				intOrPtr* _t136;
				void* _t137;
				signed int _t138;
				void* _t140;
				signed char _t151;
				signed char _t153;
				void* _t158;
				void* _t159;
				signed int* _t161;
				void* _t162;
				void* _t166;
				signed int _t167;
				signed int _t173;
				void* _t178;
				intOrPtr* _t179;
				void* _t180;
				void** _t181;
				intOrPtr* _t182;
				signed char** _t183;
				void** _t185;
				signed int _t186;
				intOrPtr* _t187;

				if(__eax == 0) {
					return __eax;
				} else {
					_t136 = __eax;
					_t179 = _t178 + 0xffffff80;
					 *_t179 = __eax;
					_t89 = E6DB24300();
					if(_t89 == 1) {
						_t137 = _t179 + 0x15;
						_t166 = "Error cleaning up spin_keys for thread ";
						_t91 = memcpy(_t137, _t166, 0xa << 2);
						_t180 = _t179 + 0xc;
						_t158 = _t180 + 0x3d;
						memset(_t158, _t91, 0x43 << 0);
						_t181 = _t180 + 0xc;
						_t159 = _t158 + 0x43;
						_t151 = 0;
						_t93 = GetCurrentThreadId();
						_t152 =  &(_t181[0xf]);
						_t181[2] = 0xa;
						_t181[1] =  &(_t181[0xf]);
						 *_t181 = _t93;
						 *0x6db2f278();
						__eflags = _t181[0xf];
						_t95 = 0x27;
						if(_t181[0xf] != 0) {
							while(1) {
								_t95 = _t95 + 1;
								__eflags =  *((char*)(_t137 + _t95));
								if( *((char*)(_t137 + _t95)) == 0) {
									break;
								}
								__eflags = _t95 - 0x6a;
								if(_t95 != 0x6a) {
									continue;
								}
								goto L10;
							}
							__eflags = _t95 - 0x6a;
							if(_t95 != 0x6a) {
								goto L9;
							}
						} else {
							L9:
							 *((char*)(_t181 + _t95 + 0x15)) = 0xa;
							 *((char*)(_t181 + _t95 + 0x16)) = 0;
						}
						L10:
						 *_t181 = _t137;
						OutputDebugStringA(??);
						_push(_t95);
						abort();
						_push(_t159);
						_push(_t166);
						_push(_t137);
						_t182 = _t181 - 0x2c;
						__eflags =  *0x6db2c050 - 1;
						if(__eflags != 0) {
							E6DB24990(_t151, _t152, __eflags);
						}
						 *_t182 =  *0x6db2a020;
						_t97 = TlsGetValue(??);
						_t183 = _t182 - 4;
						_t138 = _t97;
						__eflags = _t97;
						if(__eflags == 0) {
							_t167 = E6DB248D0(__eflags);
							__eflags =  *0x6db30020;
							if( *0x6db30020 == 0) {
								goto L14;
							} else {
								__eflags = _t167;
								if(_t167 == 0) {
									goto L14;
								} else {
									 *(_t167 + 0x24) = 1;
									 *((intOrPtr*)(_t167 + 0x3c)) = GetCurrentThreadId();
									_t183[3] = 0;
									_t183[2] = 0;
									_t183[1] = 1;
									 *_t183 = 0;
									_t102 = CreateEventA(??, ??, ??, ??);
									 *((intOrPtr*)(_t167 + 0x1c)) = 0xffffffff;
									 *(_t167 + 0x18) = _t102;
									_t185 = _t183 - 0x10;
									_t21 = _t167 + 0x38; // 0x38
									E6DB24A20(_t21, _t138, _t159, _t167);
									_t173 =  *0x6db2f1a0;
									 *(_t167 + 0x64) = 0;
									 *(_t167 + 0x14) = 0;
									_t161 = GetCurrentProcess();
									_t140 = GetCurrentThread();
									_t107 = GetCurrentProcess();
									_t24 = _t167 + 0x14; // 0x14
									_t153 = _t24;
									_t185[2] = _t161;
									_t185[6] = 2;
									_t185[5] = 0;
									_t185[4] = 0;
									_t185[3] = _t153;
									_t185[1] = _t140;
									 *_t185 = _t107;
									_t108 = DuplicateHandle(??, ??, ??, ??, ??, ??, ??);
									_t186 = _t185 - 0x1c;
									__eflags = _t108;
									if(_t108 == 0) {
										L20:
										abort();
										asm("ud2");
										 *0 =  *(_t186 + 0x1c);
										asm("ud2");
										_t111 = _t186 + 0x14;
										 *0 = _t111;
										asm("ud2");
										asm("invalid");
										asm("invalid");
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										asm("invalid");
										asm("invalid");
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										 *_t111 =  *_t111 + _t111;
										__eflags =  *_t111;
										asm("das");
										if(__eflags <= 0) {
											L39:
											asm("bound esp, [ecx+0x72]");
											if(__eflags < 0) {
												goto L61;
											} else {
												goto L40;
											}
										} else {
											if(__eflags < 0) {
												L28:
												asm("popad");
												if(__eflags < 0) {
													goto L49;
												} else {
													if (__eflags >= 0) goto L40;
													goto L30;
												}
											} else {
												if(__eflags == 0) {
													L42:
													__eflags = _t112 - 0x494c203d;
													goto L43;
												} else {
													if(__eflags < 0) {
														L30:
														if(__eflags >= 0) {
															L40:
															if(__eflags < 0) {
																goto L47;
															} else {
																_t112 = _t111 - 0x6c61763e;
																_t186 =  *(_t112 + 0x3d) * 0x494c203d;
																__eflags = _t186;
																goto L42;
															}
														} else {
															if(__eflags > 0) {
																if(__eflags >= 0) {
																	 *[gs:0x6c202c73] =  *[gs:0x6c202c73] & _t111;
																	__eflags =  *[gs:0x6c202c73];
																	goto L60;
																} else {
																	 *[ds:eax] =  *[ds:eax] & _t153;
																	 *_t111 =  *_t111 - _t111;
																	_t151 =  &(1[_t151]);
																	__eflags = _t151;
																	if(__eflags >= 0) {
																		goto L74;
																	} else {
																		if(__eflags < 0) {
																			goto L75;
																		} else {
																			_t173 = _t161[0x1b] * 0x69616620;
																			__eflags = _t173;
																			goto L54;
																		}
																	}
																}
															} else {
																asm("outsb");
																if(__eflags < 0) {
																	L54:
																	asm("outsd");
																	asm("outsb");
																	goto L55;
																} else {
																	_push(0x64616572);
																	if(__eflags >= 0) {
																		L43:
																		__eflags = _t112 - 0x46494c20;
																		_t173 =  &(1[_t173]);
																		_pop(_t161);
																		_t153 =  &(1[_t153]);
																		_t151 =  &(1[_t151]);
																		__eflags = _t151;
																		_push(_t153);
																		_push(_t153);
																		goto L44;
																	} else {
																		if(__eflags >= 0) {
																			L57:
																			__eflags = _t111 -  *[fs:eax];
																			 *0x202c2973 =  *0x202c2973 - _t111;
																			__eflags =  *0x202c2973;
																		} else {
																			asm("arpl [edi], bp");
																			asm("bound esp, [ecx+0x72]");
																			if(__eflags < 0) {
																				L56:
																				_t173 =  *(_t173 + 0x64) * 0x2528203a;
																				__eflags = _t173;
																				goto L57;
																			} else {
																				if(__eflags < 0) {
																					L44:
																					_t151 = _t151 - 1;
																					_t173 =  &(1[_t173]);
																					_push(_t153);
																					 *_t112 =  *_t112 - _t186;
																					 *[es:eax] =  *[es:eax] & _t151;
																					 *_t112 =  *_t112 - _t151;
																					__eflags =  *_t112;
																					asm("bound esp, [ecx+0x72]");
																					if(__eflags < 0) {
																						goto L65;
																					} else {
																						if(__eflags < 0) {
																							goto L64;
																						} else {
																							if(__eflags == 0) {
																								L55:
																								_t51 = _t167 + 0x61;
																								 *_t51 =  *(_t167 + 0x61) & _t111;
																								__eflags =  *_t51;
																								goto L56;
																							} else {
																								L47:
																								_t151 = _t151 -  *_t151;
																								_t112 = _t111 -  *(_t153 + 0x61);
																								__eflags = _t112;
																								if(__eflags < 0) {
																									goto L71;
																								} else {
																									_t186 =  *(_t173 + 0x72) * 0x623e2d29;
																									__eflags = _t186;
																									L49:
																									_t111 = _t112 - 0x7375623e;
																									__eflags = _t111;
																								}
																							}
																						}
																					}
																				} else {
																					asm("arpl [eax], ax");
																					 *_t111 =  *_t111 - _t151;
																					_t44 = _t153 + 0x61;
																					 *_t44 =  *(_t153 + 0x61) - _t111;
																					__eflags =  *_t44;
																					if( *_t44 < 0) {
																						L60:
																						asm("insb");
																						_t173 =  *(_t167 + 0x65) * 0xa642520;
																						__eflags = _t173;
																						L61:
																						_t112 = _t111 & 0x00000a64;
																						_t56 = _t140 + 0x25;
																						 *_t56 =  *(_t140 + 0x25) + _t112;
																						__eflags =  *_t56;
																						if(__eflags < 0) {
																							L66:
																							asm("das");
																							if(__eflags <= 0) {
																								goto L92;
																							} else {
																								if(__eflags < 0) {
																									goto L79;
																								} else {
																									if(__eflags == 0) {
																										goto L96;
																									} else {
																										goto L69;
																									}
																								}
																							}
																						} else {
																							_t140 = _t140 + 1;
																							_t112 = (_t112 & 0x73252064 |  *(_t112 & 0x73252064)) & 0x64252070;
																							_t58 = _t167 + 0x3d;
																							 *_t58 =  *(_t167 + 0x3d) & _t153;
																							__eflags =  *_t58;
																							__eflags = _t112 - 0x20583025;
																							if(__eflags > 0) {
																								L78:
																								if (__eflags < 0) goto L101;
																								L79:
																								asm("popad");
																							} else {
																								L64:
																								_t112 = _t112 & 0x2520646c;
																								__eflags = _t112;
																								if(__eflags >= 0) {
																									L69:
																									if(__eflags < 0) {
																										if(__eflags >= 0) {
																											goto L94;
																										} else {
																											if(__eflags > 0) {
																												goto L104;
																											} else {
																												asm("outsb");
																												if(__eflags < 0) {
																													goto L109;
																												} else {
																													_push(0x64616572);
																													if(__eflags >= 0) {
																														goto L97;
																													} else {
																														if(__eflags >= 0) {
																															_t112 = _t112 - 0x20;
																															__eflags = _t112;
																															goto L111;
																														} else {
																															asm("arpl [edi], bp");
																															if(__eflags < 0) {
																																goto L112;
																															} else {
																																asm("insb");
																																goto L89;
																															}
																														}
																													}
																												}
																											}
																										}
																									} else {
																										asm("bound esi, [ebp+0x69]");
																										asm("insb");
																										asm("das");
																										asm("insd");
																										_t173 =  *(_t167 + 0x67) * 0x36772d77;
																										__eflags = _t173;
																										L71:
																										asm("a16 ja 0x30");
																										if(__eflags > 0) {
																											L89:
																											asm("outsd");
																											asm("arpl [ebx+0x2e], bp");
																											asm("arpl [eax], ax");
																											 *_t112 =  *_t112 + _t151;
																											 *_t112 =  *_t112 - _t151;
																											__eflags =  *_t112;
																											if(__eflags < 0) {
																												goto L114;
																											} else {
																												goto L90;
																											}
																										} else {
																											_t119 = _t112 ^ 0x0000002d;
																											_t61 = _t151 + 0x31;
																											 *_t61 =  *(_t151 + 0x31) ^ _t119;
																											__eflags =  *_t61;
																											_t112 = _t119 ^ 0x6438370d;
																											__eflags =  *_t161 - _t151;
																											L74:
																											asm("insd");
																											_t173 =  *(_t167 + 0x67) * 0x36772d77;
																											__eflags = _t173;
																											L75:
																											if(__eflags > 0) {
																												L90:
																												asm("insb");
																												asm("outsd");
																												asm("arpl [ebx+0x5f], bp");
																												if(__eflags == 0) {
																													goto L98;
																												} else {
																													_t151 = _t151 -  *_t151;
																													_t153 = _t153 -  *((intOrPtr*)(_t153 + 0x77));
																													__eflags = _t153;
																													goto L92;
																												}
																											} else {
																												if(__eflags > 0) {
																													L92:
																													if(__eflags > 0) {
																														L115:
																														if(__eflags >= 0) {
																															 *((intOrPtr*)(_t153 + 0x57)) =  *((intOrPtr*)(_t153 + 0x57)) + _t153;
																															_t186 = _t186 - 1;
																															_t118 = (_t112 & 0x73252064 |  *(_t112 & 0x73252064)) & 0x64252070;
																															__eflags = _t118;
																															 *[fs:esi+0x3d] =  *[fs:esi+0x3d] & _t153;
																															_t112 = _t118 & 0x42205830;
																															_t112 - 0x72206425 = _t112 - 0x20646c25;
																														}
																														 *[fs:edi+0x3d] =  *[fs:edi+0x3d] & _t153;
																														__eflags =  *[fs:edi+0x3d];
																													} else {
																														 *0x6c61763e =  *0x6c61763e - _t173;
																														__eflags =  *0x6c61763e;
																														L94:
																														if(__eflags <= 0) {
																															L113:
																															_t112 = _t112 |  *_t112;
																															__eflags = _t112;
																															_push(_t153);
																															_push(_t161);
																															L114:
																															_t186 = _t186 - 1;
																															_t112 = _t112 & 0x64252070;
																															__eflags = _t112;
																															goto L115;
																														} else {
																															asm("insb");
																															_t186 =  *(_t112 + 0x3d) * 0x494c203d;
																															__eflags = _t186;
																															L96:
																															_t167 =  &(1[_t167]);
																															__eflags = _t167;
																															L97:
																															_t173 =  &(1[_t173]);
																															_pop(_t162);
																															_push(_t153);
																															_push(_t162);
																															_t186 = _t186 - 1;
																															_t161 = _t162 - 1;
																															 *_t112 =  *_t112 - _t186;
																															 *[es:eax] =  *[es:eax] & _t151;
																															__eflags =  *[es:eax];
																															L98:
																															 *[es:eax] =  *[es:eax] & _t151;
																															 *_t112 =  *_t112 - _t151;
																															__eflags =  *_t112;
																															if(__eflags < 0) {
																																_t114 = _t112 & 0x73252070 |  *(_t112 & 0x73252070);
																																__eflags = _t114;
																															} else {
																																asm("insb");
																																asm("outsd");
																																asm("arpl [ebx+0x5f], bp");
																																if(__eflags == 0) {
																																	L108:
																																	asm("popa");
																																	_t173 =  *(_t173 + 0x64) * 0x2528203a;
																																	__eflags = _t173;
																																	L109:
																																	__eflags = _t112 -  *[fs:eax];
																																	 *0x202c2973 =  *0x202c2973 - _t112;
																																	__eflags =  *0x202c2973;
																																} else {
																																	_t151 = _t151 -  *_t151;
																																	_t153 = _t153 -  *((intOrPtr*)(_t153 + 0x77));
																																	asm("insb");
																																	 *0x7375623e =  *0x7375623e - _t173;
																																	__eflags =  *0x7375623e;
																																	asm("bound esi, [ds:ebp+0x73]");
																																	if(__eflags >= 0) {
																																		L111:
																																		__eflags =  *(_t173 + 0x20) * 0x7325;
																																		L112:
																																		_t112 = _t112 - 0x20;
																																		asm("insb");
																																		_t173 =  *(_t167 + 0x65) * 0xa642520;
																																		__eflags = _t173;
																																		goto L113;
																																	} else {
																																		 *[ds:eax] =  *[ds:eax] & _t153;
																																		 *_t112 =  *_t112 - _t112;
																																		__eflags =  *_t112;
																																		 *_t112 =  *_t112 + _t112;
																																		 *_t112 =  *_t112 + _t112;
																																		_t151 =  &(1[_t151]);
																																		__eflags = _t151;
																																		L104:
																																		if(__eflags >= 0) {
																																			_t161[0x1b] = _t161[0x1b] & _t151;
																																			asm("arpl [ebp+0x20], sp");
																																			goto L127;
																																		} else {
																																			if (__eflags < 0) goto L127;
																																			if(__eflags < 0) {
																																				L127:
																																				 *[gs:0x73692070] =  *[gs:0x73692070] & _t112;
																																				 *0xa64 =  *0xa64 & _t112;
																																				_t78 = _t173 + 0x72;
																																				 *_t78 =  *(_t173 + 0x72) + _t112;
																																				__eflags =  *_t78;
																																				if (__eflags < 0) goto L140;
																																				asm("outsd");
																																			} else {
																																				_t173 = _t161[0x1b] * 0x69616620;
																																				__eflags = _t173;
																																				goto L108;
																																			}
																																		}
																																	}
																																}
																															}
																														}
																													}
																												} else {
																													_t112 = _t112 ^ 0x0000002d;
																													asm("insb");
																													_t186 =  *(_t153 + 0x72) * 0x65697261;
																													__eflags = _t186;
																													goto L78;
																												}
																											}
																										}
																									}
																								} else {
																									L65:
																									 *_t112 =  *_t112 + _t112;
																									 *_t161 =  *_t161 + _t151;
																									__eflags =  *_t161;
																									goto L66;
																								}
																							}
																						}
																					} else {
																						_t186 =  *(_t173 + 0x72) * 0x2a20745f;
																						 *_t153 =  *_t153 - _t173;
																						__eflags =  *_t153;
																						goto L39;
																					}
																				}
																			}
																		}
																	}
																}
															}
														}
													} else {
														asm("bound esi, [ebp+0x69]");
														asm("insb");
														asm("das");
														asm("insd");
														_t123 = _t111 ^ 0x0000002d;
														 *(_t151 + 0x31) =  *(_t151 + 0x31) ^ _t123;
														__eflags =  *_t161 - _t151;
														asm("insd");
														_t173 =  *(_t167 + 0x67) * 0x36772d77;
														_t112 = _t123 ^ 0x64383720;
														asm("insb");
														_t186 =  *(_t153 + 0x72) * 0x65697261;
														__eflags = _t186;
														goto L28;
													}
												}
											}
										}
										_t112 = _t112 |  *_t112;
										__eflags = _t112;
									} else {
										 *_t186 =  *(_t167 + 0x14);
										_t127 = GetThreadPriority(??);
										 *(_t167 + 0x68) = 0;
										 *(_t167 + 0x6c) = _t127;
										_t187 = _t186 - 4;
										 *(_t167 + 0x20) =  *(_t167 + 0x20) & 0xcf | 0x00000010;
										 *(_t187 + 4) = _t167;
										 *_t187 =  *0x6db2a020;
										_t132 = TlsSetValue(??, ??);
										_t186 = _t187 - 8;
										__eflags = _t132;
										if(_t132 == 0) {
											goto L20;
										} else {
											return _t167;
										}
									}
								}
							}
						} else {
							L14:
							return _t138;
						}
					} else {
						 *_t136 = 0xffffffff;
						return _t89;
					}
				}
			}

0x6db24a22
0x6db24a50
0x6db24a24
0x6db24a27
0x6db24a29
0x6db24a2c
0x6db24a2f
0x6db24a37
0x6db24a51
0x6db24a57
0x6db24a63
0x6db24a63
0x6db24a65
0x6db24a6e
0x6db24a6e
0x6db24a6e
0x6db24a6e
0x6db24a70
0x6db24a76
0x6db24a7a
0x6db24a82
0x6db24a86
0x6db24a89
0x6db24a8f
0x6db24a94
0x6db24a99
0x6db24aa5
0x6db24aa5
0x6db24aa8
0x6db24aac
0x00000000
0x00000000
0x6db24aa0
0x6db24aa3
0x00000000
0x00000000
0x00000000
0x6db24aa3
0x6db24aae
0x6db24ab1
0x00000000
0x00000000
0x6db24a9b
0x6db24ab3
0x6db24ab3
0x6db24ab8
0x6db24ab8
0x6db24abd
0x6db24abd
0x6db24ac0
0x6db24ac6
0x6db24ac7
0x6db24ad1
0x6db24ad2
0x6db24ad3
0x6db24ad4
0x6db24ad7
0x6db24ade
0x6db24ae0
0x6db24ae0
0x6db24aea
0x6db24aed
0x6db24af3
0x6db24af6
0x6db24af8
0x6db24afa
0x6db24b15
0x6db24b1c
0x6db24b1e
0x00000000
0x6db24b20
0x6db24b20
0x6db24b22
0x00000000
0x6db24b24
0x6db24b24
0x6db24b31
0x6db24b34
0x6db24b3c
0x6db24b44
0x6db24b4c
0x6db24b53
0x6db24b59
0x6db24b60
0x6db24b63
0x6db24b66
0x6db24b69
0x6db24b6e
0x6db24b74
0x6db24b7b
0x6db24b84
0x6db24b8c
0x6db24b8e
0x6db24b90
0x6db24b90
0x6db24b93
0x6db24b97
0x6db24b9f
0x6db24ba7
0x6db24baf
0x6db24bb3
0x6db24bb7
0x6db24bba
0x6db24bc0
0x6db24bc3
0x6db24bc5
0x6db295c5
0x6db295c5
0x6db295cf
0x6db295d5
0x6db295da
0x6db295dc
0x6db295e0
0x6db295e5
0x6db295e8
0x6db295ea
0x6db295ec
0x6db295ee
0x6db295f0
0x6db295f2
0x6db295f4
0x6db295f6
0x6db295f8
0x6db295fa
0x6db295fc
0x6db295fe
0x6db29600
0x6db29602
0x6db29604
0x6db29606
0x6db29608
0x6db2960a
0x6db2960c
0x6db2960e
0x6db29610
0x6db29612
0x6db29614
0x6db29616
0x6db29618
0x6db2961a
0x6db2961c
0x6db2961e
0x6db29620
0x6db29622
0x6db29624
0x6db29626
0x6db29628
0x6db2962a
0x6db2962c
0x6db2962e
0x6db29630
0x6db29632
0x6db29634
0x6db29636
0x6db29638
0x6db2963a
0x6db2963c
0x6db2963e
0x6db29640
0x6db29642
0x6db29644
0x6db29646
0x6db29648
0x6db2964a
0x6db2964c
0x6db2964e
0x6db29650
0x6db29652
0x6db29654
0x6db29656
0x6db29658
0x6db2965a
0x6db2965c
0x6db2965e
0x6db29660
0x6db29662
0x6db29664
0x6db29666
0x6db29668
0x6db2966a
0x6db2966c
0x6db2966e
0x6db29670
0x6db29672
0x6db29674
0x6db29676
0x6db29678
0x6db2967a
0x6db2967c
0x6db2967e
0x6db29680
0x6db29682
0x6db29684
0x6db29686
0x6db29688
0x6db2968a
0x6db2968c
0x6db2968e
0x6db29690
0x6db29692
0x6db29694
0x6db29696
0x6db29698
0x6db2969a
0x6db2969c
0x6db2969e
0x6db296a0
0x6db296a2
0x6db296a4
0x6db296a6
0x6db296a8
0x6db296aa
0x6db296ac
0x6db296ae
0x6db296b0
0x6db296b2
0x6db296b4
0x6db296b6
0x6db296b8
0x6db296ba
0x6db296bc
0x6db296be
0x6db296c0
0x6db296c2
0x6db296c4
0x6db296c6
0x6db296c8
0x6db296ca
0x6db296cc
0x6db296ce
0x6db296d0
0x6db296d2
0x6db296d4
0x6db296d6
0x6db296d8
0x6db296da
0x6db296dc
0x6db296de
0x6db296e0
0x6db296e2
0x6db296e4
0x6db296e6
0x6db296e8
0x6db296ea
0x6db296ec
0x6db296ee
0x6db296f0
0x6db296f2
0x6db296f4
0x6db296f6
0x6db296f8
0x6db296fa
0x6db296fc
0x6db296fe
0x6db29700
0x6db29702
0x6db29704
0x6db29706
0x6db29708
0x6db2970a
0x6db2970c
0x6db2970e
0x6db29710
0x6db29712
0x6db29714
0x6db29716
0x6db29718
0x6db2971a
0x6db2971c
0x6db2971e
0x6db29720
0x6db29722
0x6db29724
0x6db29726
0x6db29728
0x6db2972a
0x6db2972c
0x6db2972e
0x6db29730
0x6db29732
0x6db29734
0x6db29736
0x6db29738
0x6db2973a
0x6db2973c
0x6db2973e
0x6db29740
0x6db29742
0x6db29744
0x6db29746
0x6db29748
0x6db2974a
0x6db2974c
0x6db2974e
0x6db29750
0x6db29752
0x6db29754
0x6db29756
0x6db29758
0x6db2975a
0x6db2975c
0x6db2975e
0x6db29760
0x6db29762
0x6db29764
0x6db29766
0x6db29768
0x6db2976a
0x6db2976c
0x6db2976e
0x6db29770
0x6db29772
0x6db29774
0x6db29776
0x6db29778
0x6db2977a
0x6db2977c
0x6db2977e
0x6db29780
0x6db29782
0x6db29784
0x6db29786
0x6db29788
0x6db2978a
0x6db2978c
0x6db2978e
0x6db29790
0x6db29792
0x6db29794
0x6db29796
0x6db29798
0x6db2979a
0x6db2979c
0x6db2979e
0x6db297a0
0x6db297a2
0x6db297a4
0x6db297a6
0x6db297a8
0x6db297aa
0x6db297ac
0x6db297ae
0x6db297b0
0x6db297b2
0x6db297b4
0x6db297b6
0x6db297b8
0x6db297ba
0x6db297bc
0x6db297be
0x6db297c0
0x6db297c2
0x6db297c4
0x6db297c6
0x6db297c8
0x6db297ca
0x6db297cc
0x6db297ce
0x6db297d0
0x6db297d2
0x6db297d4
0x6db297d6
0x6db297d8
0x6db297da
0x6db297dc
0x6db297de
0x6db297e0
0x6db297e2
0x6db297e4
0x6db297e6
0x6db297e8
0x6db297ea
0x6db297ec
0x6db297ee
0x6db297f0
0x6db297f2
0x6db297f4
0x6db297f6
0x6db297f8
0x6db297fa
0x6db297fc
0x6db297fe
0x6db29800
0x6db29802
0x6db29804
0x6db29806
0x6db29808
0x6db2980a
0x6db2980c
0x6db2980e
0x6db29810
0x6db29812
0x6db29814
0x6db29816
0x6db29818
0x6db2981a
0x6db2981c
0x6db2981e
0x6db29820
0x6db29822
0x6db29824
0x6db29826
0x6db29828
0x6db2982a
0x6db2982c
0x6db2982e
0x6db29830
0x6db29832
0x6db29834
0x6db29836
0x6db29838
0x6db2983a
0x6db2983c
0x6db2983e
0x6db29840
0x6db29842
0x6db29844
0x6db29846
0x6db29848
0x6db2984a
0x6db2984c
0x6db2984e
0x6db29850
0x6db29852
0x6db29854
0x6db29856
0x6db29858
0x6db2985a
0x6db2985c
0x6db2985e
0x6db29860
0x6db29862
0x6db29864
0x6db29866
0x6db29868
0x6db2986a
0x6db2986c
0x6db2986e
0x6db29870
0x6db29872
0x6db29874
0x6db29876
0x6db29878
0x6db2987a
0x6db2987c
0x6db2987e
0x6db29880
0x6db29882
0x6db29884
0x6db29886
0x6db29888
0x6db2988a
0x6db2988c
0x6db2988e
0x6db29890
0x6db29892
0x6db29894
0x6db29896
0x6db29898
0x6db2989a
0x6db2989c
0x6db2989e
0x6db298a0
0x6db298a2
0x6db298a4
0x6db298a6
0x6db298a8
0x6db298aa
0x6db298ac
0x6db298ae
0x6db298b0
0x6db298b2
0x6db298b4
0x6db298b6
0x6db298b8
0x6db298ba
0x6db298bc
0x6db298be
0x6db298c0
0x6db298c2
0x6db298c4
0x6db298c6
0x6db298c8
0x6db298ca
0x6db298cc
0x6db298ce
0x6db298d0
0x6db298d2
0x6db298d4
0x6db298d6
0x6db298d8
0x6db298da
0x6db298dc
0x6db298de
0x6db298e0
0x6db298e2
0x6db298e4
0x6db298e6
0x6db298e8
0x6db298ea
0x6db298ec
0x6db298ee
0x6db298f0
0x6db298f2
0x6db298f4
0x6db298f6
0x6db298f8
0x6db298fa
0x6db298fc
0x6db298fe
0x6db29900
0x6db29902
0x6db29904
0x6db29906
0x6db29908
0x6db2990a
0x6db2990c
0x6db2990e
0x6db29910
0x6db29912
0x6db29914
0x6db29916
0x6db29918
0x6db2991a
0x6db2991c
0x6db2991e
0x6db29920
0x6db29922
0x6db29924
0x6db29926
0x6db29928
0x6db2992a
0x6db2992c
0x6db2992e
0x6db29930
0x6db29932
0x6db29934
0x6db29936
0x6db29938
0x6db2993a
0x6db2993c
0x6db2993e
0x6db29940
0x6db29942
0x6db29944
0x6db29946
0x6db29948
0x6db2994a
0x6db2994c
0x6db2994e
0x6db29950
0x6db29952
0x6db29954
0x6db29956
0x6db29958
0x6db2995a
0x6db2995c
0x6db2995e
0x6db29960
0x6db29962
0x6db29964
0x6db29966
0x6db29968
0x6db2996a
0x6db2996c
0x6db2996e
0x6db29970
0x6db29972
0x6db29974
0x6db29976
0x6db29978
0x6db2997a
0x6db2997c
0x6db2997e
0x6db29980
0x6db29982
0x6db29984
0x6db29986
0x6db29988
0x6db2998a
0x6db2998c
0x6db2998e
0x6db29990
0x6db29992
0x6db29994
0x6db29996
0x6db29998
0x6db2999a
0x6db2999c
0x6db2999e
0x6db299a0
0x6db299a2
0x6db299a4
0x6db299a6
0x6db299a8
0x6db299aa
0x6db299ac
0x6db299ae
0x6db299b0
0x6db299b2
0x6db299b4
0x6db299b6
0x6db299b8
0x6db299ba
0x6db299bc
0x6db299be
0x6db299c0
0x6db299c2
0x6db299c4
0x6db299c6
0x6db299c8
0x6db299ca
0x6db299cc
0x6db299ce
0x6db299d0
0x6db299d2
0x6db299d4
0x6db299d6
0x6db299d8
0x6db299da
0x6db299dc
0x6db299de
0x6db299e0
0x6db299e2
0x6db299e4
0x6db299e6
0x6db299e8
0x6db299ea
0x6db299ec
0x6db299ee
0x6db299f0
0x6db299f2
0x6db299f4
0x6db299f6
0x6db299f8
0x6db299fa
0x6db299fc
0x6db299fe
0x6db29a00
0x6db29a02
0x6db29a04
0x6db29a06
0x6db29a08
0x6db29a0a
0x6db29a0c
0x6db29a0e
0x6db29a10
0x6db29a12
0x6db29a14
0x6db29a16
0x6db29a18
0x6db29a1a
0x6db29a1c
0x6db29a1e
0x6db29a20
0x6db29a22
0x6db29a24
0x6db29a26
0x6db29a28
0x6db29a2a
0x6db29a2c
0x6db29a2e
0x6db29a30
0x6db29a32
0x6db29a34
0x6db29a36
0x6db29a38
0x6db29a3a
0x6db29a3c
0x6db29a3e
0x6db29a40
0x6db29a42
0x6db29a44
0x6db29a46
0x6db29a48
0x6db29a4a
0x6db29a4c
0x6db29a4e
0x6db29a50
0x6db29a52
0x6db29a54
0x6db29a56
0x6db29a58
0x6db29a5a
0x6db29a5c
0x6db29a5e
0x6db29a60
0x6db29a62
0x6db29a64
0x6db29a66
0x6db29a68
0x6db29a6a
0x6db29a6c
0x6db29a6e
0x6db29a70
0x6db29a72
0x6db29a74
0x6db29a76
0x6db29a78
0x6db29a7a
0x6db29a7c
0x6db29a7e
0x6db29a80
0x6db29a82
0x6db29a84
0x6db29a86
0x6db29a88
0x6db29a8a
0x6db29a8c
0x6db29a8e
0x6db29a90
0x6db29a92
0x6db29a94
0x6db29a96
0x6db29a98
0x6db29a9a
0x6db29a9c
0x6db29a9e
0x6db29aa0
0x6db29aa2
0x6db29aa4
0x6db29aa6
0x6db29aa8
0x6db29aaa
0x6db29aac
0x6db29aae
0x6db29ab0
0x6db29ab2
0x6db29ab4
0x6db29ab6
0x6db29ab8
0x6db29aba
0x6db29abc
0x6db29abe
0x6db29ac0
0x6db29ac2
0x6db29ac4
0x6db29ac6
0x6db29ac8
0x6db29aca
0x6db29acc
0x6db29ace
0x6db29ad0
0x6db29ad2
0x6db29ad4
0x6db29ad6
0x6db29ad8
0x6db29ada
0x6db29adc
0x6db29ade
0x6db29ae0
0x6db29ae2
0x6db29ae4
0x6db29ae6
0x6db29ae8
0x6db29aea
0x6db29aec
0x6db29aee
0x6db29af0
0x6db29af2
0x6db29af4
0x6db29af6
0x6db29af8
0x6db29afa
0x6db29afc
0x6db29afe
0x6db29b00
0x6db29b02
0x6db29b04
0x6db29b06
0x6db29b08
0x6db29b0a
0x6db29b0c
0x6db29b0e
0x6db29b10
0x6db29b12
0x6db29b14
0x6db29b16
0x6db29b18
0x6db29b1a
0x6db29b1c
0x6db29b1e
0x6db29b20
0x6db29b22
0x6db29b24
0x6db29b26
0x6db29b28
0x6db29b2a
0x6db29b2c
0x6db29b2e
0x6db29b30
0x6db29b32
0x6db29b34
0x6db29b36
0x6db29b38
0x6db29b3a
0x6db29b3c
0x6db29b3e
0x6db29b40
0x6db29b42
0x6db29b44
0x6db29b46
0x6db29b48
0x6db29b4a
0x6db29b4c
0x6db29b4e
0x6db29b50
0x6db29b52
0x6db29b54
0x6db29b56
0x6db29b58
0x6db29b5a
0x6db29b5c
0x6db29b5e
0x6db29b60
0x6db29b62
0x6db29b64
0x6db29b66
0x6db29b68
0x6db29b6a
0x6db29b6c
0x6db29b6e
0x6db29b70
0x6db29b72
0x6db29b74
0x6db29b76
0x6db29b78
0x6db29b7a
0x6db29b7c
0x6db29b7e
0x6db29b80
0x6db29b82
0x6db29b84
0x6db29b86
0x6db29b88
0x6db29b8a
0x6db29b8c
0x6db29b8e
0x6db29b90
0x6db29b92
0x6db29b94
0x6db29b96
0x6db29b98
0x6db29b9a
0x6db29b9c
0x6db29b9e
0x6db29ba0
0x6db29ba2
0x6db29ba4
0x6db29ba6
0x6db29ba8
0x6db29baa
0x6db29bac
0x6db29bae
0x6db29bb0
0x6db29bb2
0x6db29bb4
0x6db29bb6
0x6db29bb8
0x6db29bba
0x6db29bbc
0x6db29bbe
0x6db29bc0
0x6db29bc2
0x6db29bc4
0x6db29bc6
0x6db29bc8
0x6db29bca
0x6db29bcc
0x6db29bce
0x6db29bd0
0x6db29bd2
0x6db29bd4
0x6db29bd6
0x6db29bd8
0x6db29bda
0x6db29bdc
0x6db29bde
0x6db29be0
0x6db29be2
0x6db29be4
0x6db29be6
0x6db29be8
0x6db29bea
0x6db29bec
0x6db29bee
0x6db29bf0
0x6db29bf2
0x6db29bf4
0x6db29bf6
0x6db29bf8
0x6db29bfa
0x6db29bfc
0x6db29bfe
0x6db29c00
0x6db29c02
0x6db29c04
0x6db29c06
0x6db29c08
0x6db29c0a
0x6db29c0c
0x6db29c0e
0x6db29c10
0x6db29c12
0x6db29c14
0x6db29c16
0x6db29c18
0x6db29c1a
0x6db29c1c
0x6db29c1e
0x6db29c20
0x6db29c22
0x6db29c24
0x6db29c26
0x6db29c28
0x6db29c2a
0x6db29c2c
0x6db29c2e
0x6db29c30
0x6db29c32
0x6db29c34
0x6db29c36
0x6db29c38
0x6db29c3a
0x6db29c3c
0x6db29c3e
0x6db29c40
0x6db29c42
0x6db29c44
0x6db29c46
0x6db29c48
0x6db29c4a
0x6db29c4c
0x6db29c4e
0x6db29c50
0x6db29c52
0x6db29c54
0x6db29c56
0x6db29c58
0x6db29c5a
0x6db29c5c
0x6db29c5e
0x6db29c60
0x6db29c62
0x6db29c64
0x6db29c66
0x6db29c68
0x6db29c6a
0x6db29c6c
0x6db29c6e
0x6db29c70
0x6db29c72
0x6db29c74
0x6db29c76
0x6db29c78
0x6db29c7a
0x6db29c7c
0x6db29c7e
0x6db29c80
0x6db29c82
0x6db29c84
0x6db29c86
0x6db29c88
0x6db29c8a
0x6db29c8c
0x6db29c8e
0x6db29c90
0x6db29c92
0x6db29c94
0x6db29c96
0x6db29c98
0x6db29c9a
0x6db29c9c
0x6db29c9e
0x6db29ca0
0x6db29ca2
0x6db29ca4
0x6db29ca6
0x6db29ca8
0x6db29caa
0x6db29cac
0x6db29cae
0x6db29cb0
0x6db29cb2
0x6db29cb4
0x6db29cb6
0x6db29cb8
0x6db29cba
0x6db29cbc
0x6db29cbe
0x6db29cc0
0x6db29cc2
0x6db29cc4
0x6db29cc6
0x6db29cc8
0x6db29cca
0x6db29ccc
0x6db29cce
0x6db29cd0
0x6db29cd2
0x6db29cd4
0x6db29cd6
0x6db29cd8
0x6db29cda
0x6db29cdc
0x6db29cde
0x6db29ce0
0x6db29ce2
0x6db29ce4
0x6db29ce6
0x6db29ce8
0x6db29cea
0x6db29cec
0x6db29cee
0x6db29cf0
0x6db29cf2
0x6db29cf4
0x6db29cf6
0x6db29cf8
0x6db29cfa
0x6db29cfc
0x6db29cfe
0x6db29d00
0x6db29d02
0x6db29d04
0x6db29d06
0x6db29d08
0x6db29d0a
0x6db29d0c
0x6db29d0e
0x6db29d10
0x6db29d12
0x6db29d14
0x6db29d16
0x6db29d18
0x6db29d1a
0x6db29d1c
0x6db29d1e
0x6db29d20
0x6db29d22
0x6db29d24
0x6db29d26
0x6db29d28
0x6db29d2a
0x6db29d2c
0x6db29d2e
0x6db29d30
0x6db29d32
0x6db29d34
0x6db29d36
0x6db29d38
0x6db29d3a
0x6db29d3c
0x6db29d3e
0x6db29d40
0x6db29d42
0x6db29d44
0x6db29d46
0x6db29d48
0x6db29d4a
0x6db29d4c
0x6db29d4e
0x6db29d50
0x6db29d52
0x6db29d54
0x6db29d56
0x6db29d58
0x6db29d5a
0x6db29d5c
0x6db29d5e
0x6db29d60
0x6db29d62
0x6db29d64
0x6db29d66
0x6db29d68
0x6db29d6a
0x6db29d6c
0x6db29d6e
0x6db29d70
0x6db29d72
0x6db29d74
0x6db29d76
0x6db29d78
0x6db29d7a
0x6db29d7c
0x6db29d7e
0x6db29d80
0x6db29d82
0x6db29d84
0x6db29d86
0x6db29d88
0x6db29d8a
0x6db29d8c
0x6db29d8e
0x6db29d90
0x6db29d92
0x6db29d94
0x6db29d96
0x6db29d98
0x6db29d9a
0x6db29d9c
0x6db29d9e
0x6db29da0
0x6db29da2
0x6db29da4
0x6db29da6
0x6db29da8
0x6db29daa
0x6db29dac
0x6db29dae
0x6db29db0
0x6db29db2
0x6db29db4
0x6db29db6
0x6db29db8
0x6db29dba
0x6db29dbc
0x6db29dbe
0x6db29dc0
0x6db29dc2
0x6db29dc4
0x6db29dc6
0x6db29dc8
0x6db29dca
0x6db29dcc
0x6db29dce
0x6db29dd0
0x6db29dd2
0x6db29dd4
0x6db29dd6
0x6db29dd8
0x6db29dda
0x6db29ddc
0x6db29dde
0x6db29de0
0x6db29de2
0x6db29de4
0x6db29de6
0x6db29de8
0x6db29dea
0x6db29dec
0x6db29dee
0x6db29df0
0x6db29df2
0x6db29df4
0x6db29df6
0x6db29df8
0x6db29dfa
0x6db29dfc
0x6db29dfe
0x6db29e00
0x6db29e02
0x6db29e04
0x6db29e06
0x6db29e08
0x6db29e0a
0x6db29e0c
0x6db29e0e
0x6db29e10
0x6db29e12
0x6db29e14
0x6db29e16
0x6db29e18
0x6db29e1a
0x6db29e1c
0x6db29e1e
0x6db29e20
0x6db29e22
0x6db29e24
0x6db29e26
0x6db29e28
0x6db29e2a
0x6db29e2c
0x6db29e2e
0x6db29e30
0x6db29e32
0x6db29e34
0x6db29e36
0x6db29e38
0x6db29e3a
0x6db29e3c
0x6db29e3e
0x6db29e40
0x6db29e42
0x6db29e44
0x6db29e46
0x6db29e48
0x6db29e4a
0x6db29e4c
0x6db29e4e
0x6db29e50
0x6db29e52
0x6db29e54
0x6db29e56
0x6db29e58
0x6db29e5a
0x6db29e5c
0x6db29e5e
0x6db29e60
0x6db29e62
0x6db29e64
0x6db29e66
0x6db29e68
0x6db29e6a
0x6db29e6c
0x6db29e6e
0x6db29e70
0x6db29e72
0x6db29e74
0x6db29e76
0x6db29e78
0x6db29e7a
0x6db29e7c
0x6db29e7e
0x6db29e80
0x6db29e82
0x6db29e84
0x6db29e86
0x6db29e88
0x6db29e8a
0x6db29e8c
0x6db29e8e
0x6db29e90
0x6db29e92
0x6db29e94
0x6db29e96
0x6db29e98
0x6db29e9a
0x6db29e9c
0x6db29e9e
0x6db29ea0
0x6db29ea2
0x6db29ea4
0x6db29ea6
0x6db29ea8
0x6db29eaa
0x6db29eac
0x6db29eae
0x6db29eb0
0x6db29eb2
0x6db29eb4
0x6db29eb6
0x6db29eb8
0x6db29eba
0x6db29ebc
0x6db29ebe
0x6db29ec0
0x6db29ec2
0x6db29ec4
0x6db29ec6
0x6db29ec8
0x6db29eca
0x6db29ecc
0x6db29ece
0x6db29ed0
0x6db29ed2
0x6db29ed4
0x6db29ed6
0x6db29ed8
0x6db29eda
0x6db29edc
0x6db29ede
0x6db29ee0
0x6db29ee2
0x6db29ee4
0x6db29ee6
0x6db29ee8
0x6db29eea
0x6db29eec
0x6db29eee
0x6db29ef0
0x6db29ef2
0x6db29ef4
0x6db29ef6
0x6db29ef8
0x6db29efa
0x6db29efc
0x6db29efe
0x6db29f00
0x6db29f02
0x6db29f04
0x6db29f06
0x6db29f08
0x6db29f0a
0x6db29f0c
0x6db29f0e
0x6db29f10
0x6db29f12
0x6db29f14
0x6db29f16
0x6db29f18
0x6db29f1a
0x6db29f1c
0x6db29f1e
0x6db29f20
0x6db29f22
0x6db29f24
0x6db29f26
0x6db29f28
0x6db29f2a
0x6db29f2c
0x6db29f2e
0x6db29f30
0x6db29f32
0x6db29f34
0x6db29f36
0x6db29f38
0x6db29f3a
0x6db29f3c
0x6db29f3e
0x6db29f40
0x6db29f42
0x6db29f44
0x6db29f46
0x6db29f48
0x6db29f4a
0x6db29f4c
0x6db29f4e
0x6db29f50
0x6db29f52
0x6db29f54
0x6db29f56
0x6db29f58
0x6db29f5a
0x6db29f5c
0x6db29f5e
0x6db29f60
0x6db29f62
0x6db29f64
0x6db29f66
0x6db29f68
0x6db29f6a
0x6db29f6c
0x6db29f6e
0x6db29f70
0x6db29f72
0x6db29f74
0x6db29f76
0x6db29f78
0x6db29f7a
0x6db29f7c
0x6db29f7e
0x6db29f80
0x6db29f82
0x6db29f84
0x6db29f86
0x6db29f88
0x6db29f8a
0x6db29f8c
0x6db29f8e
0x6db29f90
0x6db29f92
0x6db29f94
0x6db29f96
0x6db29f98
0x6db29f9a
0x6db29f9c
0x6db29f9e
0x6db29fa0
0x6db29fa2
0x6db29fa4
0x6db29fa6
0x6db29fa8
0x6db29faa
0x6db29fac
0x6db29fae
0x6db29fb0
0x6db29fb2
0x6db29fb4
0x6db29fb6
0x6db29fb8
0x6db29fba
0x6db29fbc
0x6db29fbe
0x6db29fc0
0x6db29fc2
0x6db29fc4
0x6db29fc6
0x6db29fc8
0x6db29fca
0x6db29fcc
0x6db29fce
0x6db29fd0
0x6db29fd2
0x6db29fd4
0x6db29fd6
0x6db29fd8
0x6db29fda
0x6db29fdc
0x6db29fde
0x6db29fe0
0x6db29fe2
0x6db29fe4
0x6db29fe6
0x6db29fe8
0x6db29fea
0x6db29fec
0x6db29fee
0x6db29ff0
0x6db29ff2
0x6db29ff4
0x6db29ff6
0x6db29ff8
0x6db29ffa
0x6db29ffc
0x6db29ffe
0x6db2a000
0x6db2a002
0x6db2a004
0x6db2a006
0x6db2a008
0x6db2a00a
0x6db2a00c
0x6db2a00e
0x6db2a010
0x6db2a012
0x6db2a014
0x6db2a016
0x6db2a018
0x6db2a01a
0x6db2a01c
0x6db2a01e
0x6db2a020
0x6db2a022
0x6db2a024
0x6db2a026
0x6db2a028
0x6db2a02a
0x6db2a02c
0x6db2a02e
0x6db2a030
0x6db2a032
0x6db2a034
0x6db2a036
0x6db2a038
0x6db2a03a
0x6db2a03c
0x6db2a03e
0x6db2a040
0x6db2a042
0x6db2a044
0x6db2a046
0x6db2a048
0x6db2a04a
0x6db2a04c
0x6db2a04e
0x6db2a050
0x6db2a052
0x6db2a054
0x6db2a056
0x6db2a058
0x6db2a05a
0x6db2a05c
0x6db2a05e
0x6db2a060
0x6db2a062
0x6db2a064
0x6db2a066
0x6db2a068
0x6db2a06a
0x6db2a06c
0x6db2a06e
0x6db2a070
0x6db2a072
0x6db2a074
0x6db2a076
0x6db2a078
0x6db2a07a
0x6db2a07c
0x6db2a07e
0x6db2a080
0x6db2a082
0x6db2a084
0x6db2a086
0x6db2a088
0x6db2a08a
0x6db2a08c
0x6db2a08e
0x6db2a090
0x6db2a092
0x6db2a094
0x6db2a096
0x6db2a098
0x6db2a09a
0x6db2a09c
0x6db2a09e
0x6db2a0a0
0x6db2a0a2
0x6db2a0a4
0x6db2a0a6
0x6db2a0a8
0x6db2a0aa
0x6db2a0ac
0x6db2a0ae
0x6db2a0b0
0x6db2a0b2
0x6db2a0b4
0x6db2a0b6
0x6db2a0b8
0x6db2a0ba
0x6db2a0bc
0x6db2a0be
0x6db2a0c0
0x6db2a0c2
0x6db2a0c4
0x6db2a0c6
0x6db2a0c8
0x6db2a0ca
0x6db2a0cc
0x6db2a0ce
0x6db2a0d0
0x6db2a0d2
0x6db2a0d4
0x6db2a0d6
0x6db2a0d8
0x6db2a0da
0x6db2a0dc
0x6db2a0de
0x6db2a0e0
0x6db2a0e2
0x6db2a0e4
0x6db2a0e6
0x6db2a0e8
0x6db2a0ea
0x6db2a0ec
0x6db2a0ee
0x6db2a0f0
0x6db2a0f2
0x6db2a0f4
0x6db2a0f6
0x6db2a0f8
0x6db2a0fa
0x6db2a0fc
0x6db2a0fe
0x6db2a100
0x6db2a102
0x6db2a104
0x6db2a106
0x6db2a108
0x6db2a10a
0x6db2a10c
0x6db2a10e
0x6db2a110
0x6db2a112
0x6db2a114
0x6db2a116
0x6db2a118
0x6db2a11a
0x6db2a11c
0x6db2a11e
0x6db2a120
0x6db2a122
0x6db2a124
0x6db2a126
0x6db2a128
0x6db2a12a
0x6db2a12c
0x6db2a12e
0x6db2a130
0x6db2a132
0x6db2a134
0x6db2a136
0x6db2a138
0x6db2a13a
0x6db2a13c
0x6db2a13e
0x6db2a140
0x6db2a142
0x6db2a144
0x6db2a146
0x6db2a148
0x6db2a14a
0x6db2a14c
0x6db2a14e
0x6db2a150
0x6db2a152
0x6db2a154
0x6db2a156
0x6db2a158
0x6db2a15a
0x6db2a15c
0x6db2a15e
0x6db2a160
0x6db2a162
0x6db2a164
0x6db2a166
0x6db2a168
0x6db2a16a
0x6db2a16c
0x6db2a16e
0x6db2a170
0x6db2a172
0x6db2a174
0x6db2a176
0x6db2a178
0x6db2a17a
0x6db2a17c
0x6db2a17e
0x6db2a180
0x6db2a182
0x6db2a184
0x6db2a186
0x6db2a188
0x6db2a18a
0x6db2a18c
0x6db2a18e
0x6db2a190
0x6db2a192
0x6db2a194
0x6db2a196
0x6db2a198
0x6db2a19a
0x6db2a19c
0x6db2a19e
0x6db2a1a0
0x6db2a1a2
0x6db2a1a4
0x6db2a1a6
0x6db2a1a8
0x6db2a1aa
0x6db2a1ac
0x6db2a1ae
0x6db2a1b0
0x6db2a1b2
0x6db2a1b4
0x6db2a1b6
0x6db2a1b8
0x6db2a1ba
0x6db2a1bc
0x6db2a1be
0x6db2a1c0
0x6db2a1c2
0x6db2a1c4
0x6db2a1c6
0x6db2a1c8
0x6db2a1ca
0x6db2a1cc
0x6db2a1ce
0x6db2a1d0
0x6db2a1d2
0x6db2a1d4
0x6db2a1d6
0x6db2a1d8
0x6db2a1da
0x6db2a1dc
0x6db2a1de
0x6db2a1e0
0x6db2a1e2
0x6db2a1e4
0x6db2a1e6
0x6db2a1e8
0x6db2a1ea
0x6db2a1ec
0x6db2a1ee
0x6db2a1f0
0x6db2a1f2
0x6db2a1f4
0x6db2a1f6
0x6db2a1f8
0x6db2a1fa
0x6db2a1fc
0x6db2a1fe
0x6db2a200
0x6db2a202
0x6db2a204
0x6db2a206
0x6db2a208
0x6db2a20a
0x6db2a20c
0x6db2a20e
0x6db2a210
0x6db2a212
0x6db2a214
0x6db2a216
0x6db2a218
0x6db2a21a
0x6db2a21c
0x6db2a21e
0x6db2a220
0x6db2a222
0x6db2a224
0x6db2a226
0x6db2a228
0x6db2a22a
0x6db2a22c
0x6db2a22e
0x6db2a230
0x6db2a232
0x6db2a234
0x6db2a236
0x6db2a238
0x6db2a23a
0x6db2a23c
0x6db2a23e
0x6db2a240
0x6db2a242
0x6db2a244
0x6db2a246
0x6db2a248
0x6db2a24a
0x6db2a24c
0x6db2a24e
0x6db2a250
0x6db2a252
0x6db2a254
0x6db2a256
0x6db2a258
0x6db2a25a
0x6db2a25c
0x6db2a25e
0x6db2a260
0x6db2a262
0x6db2a264
0x6db2a266
0x6db2a268
0x6db2a26a
0x6db2a26c
0x6db2a26e
0x6db2a270
0x6db2a272
0x6db2a274
0x6db2a276
0x6db2a278
0x6db2a27a
0x6db2a27c
0x6db2a27e
0x6db2a280
0x6db2a282
0x6db2a284
0x6db2a286
0x6db2a288
0x6db2a28a
0x6db2a28c
0x6db2a28e
0x6db2a290
0x6db2a292
0x6db2a294
0x6db2a296
0x6db2a298
0x6db2a29a
0x6db2a29c
0x6db2a29e
0x6db2a2a0
0x6db2a2a2
0x6db2a2a4
0x6db2a2a6
0x6db2a2a8
0x6db2a2aa
0x6db2a2ac
0x6db2a2ae
0x6db2a2b0
0x6db2a2b2
0x6db2a2b4
0x6db2a2b6
0x6db2a2b8
0x6db2a2ba
0x6db2a2bc
0x6db2a2be
0x6db2a2c0
0x6db2a2c2
0x6db2a2c4
0x6db2a2c6
0x6db2a2c8
0x6db2a2ca
0x6db2a2cc
0x6db2a2ce
0x6db2a2d0
0x6db2a2d2
0x6db2a2d4
0x6db2a2d6
0x6db2a2d8
0x6db2a2da
0x6db2a2dc
0x6db2a2de
0x6db2a2e0
0x6db2a2e2
0x6db2a2e4
0x6db2a2e6
0x6db2a2e8
0x6db2a2ea
0x6db2a2ec
0x6db2a2ee
0x6db2a2f0
0x6db2a2f2
0x6db2a2f4
0x6db2a2f6
0x6db2a2f8
0x6db2a2fa
0x6db2a2fc
0x6db2a2fe
0x6db2a300
0x6db2a302
0x6db2a304
0x6db2a306
0x6db2a308
0x6db2a30a
0x6db2a30c
0x6db2a30e
0x6db2a310
0x6db2a312
0x6db2a314
0x6db2a316
0x6db2a318
0x6db2a31a
0x6db2a31c
0x6db2a31e
0x6db2a320
0x6db2a322
0x6db2a324
0x6db2a326
0x6db2a328
0x6db2a32a
0x6db2a32c
0x6db2a32e
0x6db2a330
0x6db2a332
0x6db2a334
0x6db2a336
0x6db2a338
0x6db2a33a
0x6db2a33c
0x6db2a33e
0x6db2a340
0x6db2a342
0x6db2a344
0x6db2a346
0x6db2a348
0x6db2a34a
0x6db2a34c
0x6db2a34e
0x6db2a350
0x6db2a352
0x6db2a354
0x6db2a356
0x6db2a358
0x6db2a35a
0x6db2a35c
0x6db2a35e
0x6db2a360
0x6db2a362
0x6db2a364
0x6db2a366
0x6db2a368
0x6db2a36a
0x6db2a36c
0x6db2a36e
0x6db2a370
0x6db2a372
0x6db2a374
0x6db2a376
0x6db2a378
0x6db2a37a
0x6db2a37c
0x6db2a37e
0x6db2a380
0x6db2a382
0x6db2a384
0x6db2a386
0x6db2a388
0x6db2a38a
0x6db2a38c
0x6db2a38e
0x6db2a390
0x6db2a392
0x6db2a394
0x6db2a396
0x6db2a398
0x6db2a39a
0x6db2a39c
0x6db2a39e
0x6db2a3a0
0x6db2a3a2
0x6db2a3a4
0x6db2a3a6
0x6db2a3a8
0x6db2a3aa
0x6db2a3ac
0x6db2a3ae
0x6db2a3b0
0x6db2a3b2
0x6db2a3b4
0x6db2a3b6
0x6db2a3b8
0x6db2a3ba
0x6db2a3bc
0x6db2a3be
0x6db2a3c0
0x6db2a3c2
0x6db2a3c4
0x6db2a3c6
0x6db2a3c8
0x6db2a3ca
0x6db2a3cc
0x6db2a3ce
0x6db2a3d0
0x6db2a3d2
0x6db2a3d4
0x6db2a3d6
0x6db2a3d8
0x6db2a3da
0x6db2a3dc
0x6db2a3de
0x6db2a3e0
0x6db2a3e2
0x6db2a3e4
0x6db2a3e6
0x6db2a3e8
0x6db2a3ea
0x6db2a3ec
0x6db2a3ee
0x6db2a3f0
0x6db2a3f2
0x6db2a3f4
0x6db2a3f6
0x6db2a3f8
0x6db2a3fa
0x6db2a3fc
0x6db2a3fe
0x6db2a400
0x6db2a402
0x6db2a404
0x6db2a406
0x6db2a408
0x6db2a40a
0x6db2a40c
0x6db2a40e
0x6db2a410
0x6db2a412
0x6db2a414
0x6db2a416
0x6db2a418
0x6db2a41a
0x6db2a41c
0x6db2a41e
0x6db2a420
0x6db2a422
0x6db2a424
0x6db2a426
0x6db2a428
0x6db2a42a
0x6db2a42c
0x6db2a42e
0x6db2a430
0x6db2a432
0x6db2a434
0x6db2a436
0x6db2a438
0x6db2a43a
0x6db2a43c
0x6db2a43e
0x6db2a440
0x6db2a442
0x6db2a444
0x6db2a446
0x6db2a448
0x6db2a44a
0x6db2a44c
0x6db2a44e
0x6db2a450
0x6db2a452
0x6db2a454
0x6db2a456
0x6db2a458
0x6db2a45a
0x6db2a45c
0x6db2a45e
0x6db2a460
0x6db2a462
0x6db2a464
0x6db2a466
0x6db2a468
0x6db2a46a
0x6db2a46c
0x6db2a46e
0x6db2a470
0x6db2a472
0x6db2a474
0x6db2a476
0x6db2a478
0x6db2a47a
0x6db2a47c
0x6db2a47e
0x6db2a480
0x6db2a482
0x6db2a484
0x6db2a486
0x6db2a488
0x6db2a48a
0x6db2a48c
0x6db2a48e
0x6db2a490
0x6db2a492
0x6db2a494
0x6db2a496
0x6db2a498
0x6db2a49a
0x6db2a49c
0x6db2a49e
0x6db2a4a0
0x6db2a4a2
0x6db2a4a4
0x6db2a4a6
0x6db2a4a8
0x6db2a4aa
0x6db2a4ac
0x6db2a4ae
0x6db2a4b0
0x6db2a4b2
0x6db2a4b4
0x6db2a4b6
0x6db2a4b8
0x6db2a4ba
0x6db2a4bc
0x6db2a4be
0x6db2a4c0
0x6db2a4c2
0x6db2a4c4
0x6db2a4c6
0x6db2a4c8
0x6db2a4ca
0x6db2a4cc
0x6db2a4ce
0x6db2a4d0
0x6db2a4d2
0x6db2a4d4
0x6db2a4d6
0x6db2a4d8
0x6db2a4da
0x6db2a4dc
0x6db2a4de
0x6db2a4e0
0x6db2a4e2
0x6db2a4e4
0x6db2a4e6
0x6db2a4e8
0x6db2a4ea
0x6db2a4ec
0x6db2a4ee
0x6db2a4f0
0x6db2a4f2
0x6db2a4f4
0x6db2a4f6
0x6db2a4f8
0x6db2a4fa
0x6db2a4fc
0x6db2a4fe
0x6db2a500
0x6db2a502
0x6db2a504
0x6db2a506
0x6db2a508
0x6db2a50a
0x6db2a50c
0x6db2a50e
0x6db2a510
0x6db2a512
0x6db2a514
0x6db2a516
0x6db2a518
0x6db2a51a
0x6db2a51c
0x6db2a51e
0x6db2a520
0x6db2a522
0x6db2a524
0x6db2a526
0x6db2a528
0x6db2a52a
0x6db2a52c
0x6db2a52e
0x6db2a530
0x6db2a532
0x6db2a534
0x6db2a536
0x6db2a538
0x6db2a53a
0x6db2a53c
0x6db2a53e
0x6db2a540
0x6db2a542
0x6db2a544
0x6db2a546
0x6db2a548
0x6db2a54a
0x6db2a54c
0x6db2a54e
0x6db2a550
0x6db2a552
0x6db2a554
0x6db2a556
0x6db2a558
0x6db2a55a
0x6db2a55c
0x6db2a55e
0x6db2a560
0x6db2a562
0x6db2a564
0x6db2a566
0x6db2a568
0x6db2a56a
0x6db2a56c
0x6db2a56e
0x6db2a570
0x6db2a572
0x6db2a574
0x6db2a576
0x6db2a578
0x6db2a57a
0x6db2a57c
0x6db2a57e
0x6db2a580
0x6db2a582
0x6db2a584
0x6db2a586
0x6db2a588
0x6db2a58a
0x6db2a58c
0x6db2a58e
0x6db2a590
0x6db2a592
0x6db2a594
0x6db2a596
0x6db2a598
0x6db2a59a
0x6db2a59c
0x6db2a59e
0x6db2a5a0
0x6db2a5a2
0x6db2a5a4
0x6db2a5a6
0x6db2a5a8
0x6db2a5aa
0x6db2a5ac
0x6db2a5ae
0x6db2a5b0
0x6db2a5b2
0x6db2a5b4
0x6db2a5b6
0x6db2a5b8
0x6db2a5ba
0x6db2a5bc
0x6db2a5be
0x6db2a5c0
0x6db2a5c2
0x6db2a5c4
0x6db2a5c6
0x6db2a5c8
0x6db2a5ca
0x6db2a5cc
0x6db2a5ce
0x6db2a5d0
0x6db2a5d2
0x6db2a5d4
0x6db2a5d6
0x6db2a5d8
0x6db2a5da
0x6db2a5dc
0x6db2a5de
0x6db2a5e0
0x6db2a5e2
0x6db2a5e4
0x6db2a5e6
0x6db2a5e8
0x6db2a5ea
0x6db2a5ec
0x6db2a5ee
0x6db2a5f0
0x6db2a5f2
0x6db2a5f4
0x6db2a5f6
0x6db2a5f8
0x6db2a5fa
0x6db2a5fc
0x6db2a5fe
0x6db2a600
0x6db2a602
0x6db2a604
0x6db2a606
0x6db2a608
0x6db2a60a
0x6db2a60c
0x6db2a60e
0x6db2a610
0x6db2a612
0x6db2a614
0x6db2a616
0x6db2a618
0x6db2a61a
0x6db2a61c
0x6db2a61e
0x6db2a620
0x6db2a622
0x6db2a624
0x6db2a626
0x6db2a628
0x6db2a62a
0x6db2a62c
0x6db2a62e
0x6db2a630
0x6db2a632
0x6db2a634
0x6db2a636
0x6db2a638
0x6db2a63a
0x6db2a63c
0x6db2a63e
0x6db2a640
0x6db2a642
0x6db2a644
0x6db2a646
0x6db2a648
0x6db2a64a
0x6db2a64c
0x6db2a64e
0x6db2a650
0x6db2a652
0x6db2a654
0x6db2a656
0x6db2a658
0x6db2a65a
0x6db2a65c
0x6db2a65e
0x6db2a660
0x6db2a662
0x6db2a664
0x6db2a666
0x6db2a668
0x6db2a66a
0x6db2a66c
0x6db2a66e
0x6db2a670
0x6db2a672
0x6db2a674
0x6db2a676
0x6db2a678
0x6db2a67a
0x6db2a67c
0x6db2a67e
0x6db2a680
0x6db2a682
0x6db2a684
0x6db2a686
0x6db2a688
0x6db2a68a
0x6db2a68c
0x6db2a68e
0x6db2a690
0x6db2a692
0x6db2a694
0x6db2a696
0x6db2a698
0x6db2a69a
0x6db2a69c
0x6db2a69e
0x6db2a6a0
0x6db2a6a2
0x6db2a6a4
0x6db2a6a6
0x6db2a6a8
0x6db2a6aa
0x6db2a6ac
0x6db2a6ae
0x6db2a6b0
0x6db2a6b2
0x6db2a6b4
0x6db2a6b6
0x6db2a6b8
0x6db2a6ba
0x6db2a6bc
0x6db2a6be
0x6db2a6c0
0x6db2a6c2
0x6db2a6c4
0x6db2a6c6
0x6db2a6c8
0x6db2a6ca
0x6db2a6cc
0x6db2a6ce
0x6db2a6d0
0x6db2a6d2
0x6db2a6d4
0x6db2a6d6
0x6db2a6d8
0x6db2a6da
0x6db2a6dc
0x6db2a6de
0x6db2a6e0
0x6db2a6e2
0x6db2a6e4
0x6db2a6e6
0x6db2a6e8
0x6db2a6ea
0x6db2a6ec
0x6db2a6ee
0x6db2a6f0
0x6db2a6f2
0x6db2a6f4
0x6db2a6f6
0x6db2a6f8
0x6db2a6fa
0x6db2a6fc
0x6db2a6fe
0x6db2a700
0x6db2a702
0x6db2a704
0x6db2a706
0x6db2a708
0x6db2a70a
0x6db2a70c
0x6db2a70e
0x6db2a710
0x6db2a712
0x6db2a714
0x6db2a716
0x6db2a718
0x6db2a71a
0x6db2a71c
0x6db2a71e
0x6db2a720
0x6db2a722
0x6db2a724
0x6db2a726
0x6db2a728
0x6db2a72a
0x6db2a72c
0x6db2a72e
0x6db2a730
0x6db2a732
0x6db2a734
0x6db2a736
0x6db2a738
0x6db2a73a
0x6db2a73c
0x6db2a73e
0x6db2a740
0x6db2a742
0x6db2a744
0x6db2a746
0x6db2a748
0x6db2a74a
0x6db2a74c
0x6db2a74e
0x6db2a750
0x6db2a752
0x6db2a754
0x6db2a756
0x6db2a758
0x6db2a75a
0x6db2a75c
0x6db2a75e
0x6db2a760
0x6db2a762
0x6db2a764
0x6db2a766
0x6db2a768
0x6db2a76a
0x6db2a76c
0x6db2a76e
0x6db2a770
0x6db2a772
0x6db2a774
0x6db2a776
0x6db2a778
0x6db2a77a
0x6db2a77c
0x6db2a77e
0x6db2a780
0x6db2a782
0x6db2a784
0x6db2a786
0x6db2a788
0x6db2a78a
0x6db2a78c
0x6db2a78e
0x6db2a790
0x6db2a792
0x6db2a794
0x6db2a796
0x6db2a798
0x6db2a79a
0x6db2a79c
0x6db2a79e
0x6db2a7a0
0x6db2a7a2
0x6db2a7a4
0x6db2a7a6
0x6db2a7a8
0x6db2a7aa
0x6db2a7ac
0x6db2a7ae
0x6db2a7b0
0x6db2a7b2
0x6db2a7b4
0x6db2a7b6
0x6db2a7b8
0x6db2a7ba
0x6db2a7bc
0x6db2a7be
0x6db2a7c0
0x6db2a7c2
0x6db2a7c4
0x6db2a7c6
0x6db2a7c8
0x6db2a7ca
0x6db2a7cc
0x6db2a7ce
0x6db2a7d0
0x6db2a7d2
0x6db2a7d4
0x6db2a7d6
0x6db2a7d8
0x6db2a7da
0x6db2a7dc
0x6db2a7de
0x6db2a7e0
0x6db2a7e2
0x6db2a7e4
0x6db2a7e6
0x6db2a7e8
0x6db2a7ea
0x6db2a7ec
0x6db2a7ee
0x6db2a7f0
0x6db2a7f2
0x6db2a7f4
0x6db2a7f6
0x6db2a7f8
0x6db2a7fa
0x6db2a7fc
0x6db2a7fe
0x6db2a800
0x6db2a802
0x6db2a804
0x6db2a806
0x6db2a808
0x6db2a80a
0x6db2a80c
0x6db2a80e
0x6db2a810
0x6db2a812
0x6db2a814
0x6db2a816
0x6db2a818
0x6db2a81a
0x6db2a81c
0x6db2a81e
0x6db2a820
0x6db2a822
0x6db2a824
0x6db2a826
0x6db2a828
0x6db2a82a
0x6db2a82c
0x6db2a82e
0x6db2a830
0x6db2a832
0x6db2a834
0x6db2a836
0x6db2a838
0x6db2a83a
0x6db2a83c
0x6db2a83e
0x6db2a840
0x6db2a842
0x6db2a844
0x6db2a846
0x6db2a848
0x6db2a84a
0x6db2a84c
0x6db2a84e
0x6db2a850
0x6db2a852
0x6db2a854
0x6db2a856
0x6db2a858
0x6db2a85a
0x6db2a85c
0x6db2a85e
0x6db2a860
0x6db2a862
0x6db2a864
0x6db2a866
0x6db2a868
0x6db2a86a
0x6db2a86c
0x6db2a86e
0x6db2a870
0x6db2a872
0x6db2a874
0x6db2a876
0x6db2a878
0x6db2a87a
0x6db2a87c
0x6db2a87e
0x6db2a880
0x6db2a882
0x6db2a884
0x6db2a886
0x6db2a888
0x6db2a88a
0x6db2a88c
0x6db2a88e
0x6db2a890
0x6db2a892
0x6db2a894
0x6db2a896
0x6db2a898
0x6db2a89a
0x6db2a89c
0x6db2a89e
0x6db2a8a0
0x6db2a8a2
0x6db2a8a4
0x6db2a8a6
0x6db2a8a8
0x6db2a8aa
0x6db2a8ac
0x6db2a8ae
0x6db2a8b0
0x6db2a8b2
0x6db2a8b4
0x6db2a8b6
0x6db2a8b8
0x6db2a8ba
0x6db2a8bc
0x6db2a8be
0x6db2a8c0
0x6db2a8c2
0x6db2a8c4
0x6db2a8c6
0x6db2a8c8
0x6db2a8ca
0x6db2a8cc
0x6db2a8ce
0x6db2a8d0
0x6db2a8d2
0x6db2a8d4
0x6db2a8d6
0x6db2a8d8
0x6db2a8da
0x6db2a8dc
0x6db2a8de
0x6db2a8e0
0x6db2a8e2
0x6db2a8e4
0x6db2a8e6
0x6db2a8e8
0x6db2a8ea
0x6db2a8ec
0x6db2a8ee
0x6db2a8f0
0x6db2a8f2
0x6db2a8f4
0x6db2a8f6
0x6db2a8f8
0x6db2a8fa
0x6db2a8fc
0x6db2a8fe
0x6db2a900
0x6db2a902
0x6db2a904
0x6db2a906
0x6db2a908
0x6db2a90a
0x6db2a90c
0x6db2a90e
0x6db2a910
0x6db2a912
0x6db2a914
0x6db2a916
0x6db2a918
0x6db2a91a
0x6db2a91c
0x6db2a91e
0x6db2a920
0x6db2a922
0x6db2a924
0x6db2a926
0x6db2a928
0x6db2a92a
0x6db2a92c
0x6db2a92e
0x6db2a930
0x6db2a932
0x6db2a934
0x6db2a936
0x6db2a938
0x6db2a93a
0x6db2a93c
0x6db2a93e
0x6db2a940
0x6db2a942
0x6db2a944
0x6db2a946
0x6db2a948
0x6db2a94a
0x6db2a94c
0x6db2a94e
0x6db2a950
0x6db2a952
0x6db2a954
0x6db2a956
0x6db2a958
0x6db2a95a
0x6db2a95c
0x6db2a95e
0x6db2a960
0x6db2a962
0x6db2a964
0x6db2a966
0x6db2a968
0x6db2a96a
0x6db2a96c
0x6db2a96e
0x6db2a970
0x6db2a972
0x6db2a974
0x6db2a976
0x6db2a978
0x6db2a97a
0x6db2a97c
0x6db2a97e
0x6db2a980
0x6db2a982
0x6db2a984
0x6db2a986
0x6db2a988
0x6db2a98a
0x6db2a98c
0x6db2a98e
0x6db2a990
0x6db2a992
0x6db2a994
0x6db2a996
0x6db2a998
0x6db2a99a
0x6db2a99c
0x6db2a99e
0x6db2a9a0
0x6db2a9a2
0x6db2a9a4
0x6db2a9a6
0x6db2a9a8
0x6db2a9aa
0x6db2a9ac
0x6db2a9ae
0x6db2a9b0
0x6db2a9b2
0x6db2a9b4
0x6db2a9b6
0x6db2a9b8
0x6db2a9ba
0x6db2a9bc
0x6db2a9be
0x6db2a9c0
0x6db2a9c2
0x6db2a9c4
0x6db2a9c6
0x6db2a9c8
0x6db2a9ca
0x6db2a9cc
0x6db2a9ce
0x6db2a9d0
0x6db2a9d2
0x6db2a9d4
0x6db2a9d6
0x6db2a9d8
0x6db2a9da
0x6db2a9dc
0x6db2a9de
0x6db2a9e0
0x6db2a9e2
0x6db2a9e4
0x6db2a9e6
0x6db2a9e8
0x6db2a9ea
0x6db2a9ec
0x6db2a9ee
0x6db2a9f0
0x6db2a9f2
0x6db2a9f4
0x6db2a9f6
0x6db2a9f8
0x6db2a9fa
0x6db2a9fc
0x6db2a9fe
0x6db2aa00
0x6db2aa02
0x6db2aa04
0x6db2aa06
0x6db2aa08
0x6db2aa0a
0x6db2aa0c
0x6db2aa0e
0x6db2aa10
0x6db2aa12
0x6db2aa14
0x6db2aa16
0x6db2aa18
0x6db2aa1a
0x6db2aa1c
0x6db2aa1e
0x6db2aa20
0x6db2aa22
0x6db2aa24
0x6db2aa26
0x6db2aa28
0x6db2aa2a
0x6db2aa2c
0x6db2aa2e
0x6db2aa30
0x6db2aa32
0x6db2aa34
0x6db2aa36
0x6db2aa38
0x6db2aa3a
0x6db2aa3c
0x6db2aa3e
0x6db2aa40
0x6db2aa42
0x6db2aa44
0x6db2aa46
0x6db2aa48
0x6db2aa4a
0x6db2aa4c
0x6db2aa4e
0x6db2aa50
0x6db2aa52
0x6db2aa54
0x6db2aa56
0x6db2aa58
0x6db2aa5a
0x6db2aa5c
0x6db2aa5e
0x6db2aa60
0x6db2aa62
0x6db2aa64
0x6db2aa66
0x6db2aa68
0x6db2aa6a
0x6db2aa6c
0x6db2aa6e
0x6db2aa70
0x6db2aa72
0x6db2aa74
0x6db2aa76
0x6db2aa78
0x6db2aa7a
0x6db2aa7c
0x6db2aa7e
0x6db2aa80
0x6db2aa82
0x6db2aa84
0x6db2aa86
0x6db2aa88
0x6db2aa8a
0x6db2aa8c
0x6db2aa8e
0x6db2aa90
0x6db2aa92
0x6db2aa94
0x6db2aa96
0x6db2aa98
0x6db2aa9a
0x6db2aa9c
0x6db2aa9e
0x6db2aaa0
0x6db2aaa2
0x6db2aaa4
0x6db2aaa6
0x6db2aaa8
0x6db2aaaa
0x6db2aaac
0x6db2aaae
0x6db2aab0
0x6db2aab2
0x6db2aab4
0x6db2aab6
0x6db2aab8
0x6db2aaba
0x6db2aabc
0x6db2aabe
0x6db2aac0
0x6db2aac2
0x6db2aac4
0x6db2aac6
0x6db2aac8
0x6db2aaca
0x6db2aacc
0x6db2aace
0x6db2aad0
0x6db2aad2
0x6db2aad4
0x6db2aad6
0x6db2aad8
0x6db2aada
0x6db2aadc
0x6db2aade
0x6db2aae0
0x6db2aae2
0x6db2aae4
0x6db2aae6
0x6db2aae8
0x6db2aaea
0x6db2aaec
0x6db2aaee
0x6db2aaf0
0x6db2aaf2
0x6db2aaf4
0x6db2aaf6
0x6db2aaf8
0x6db2aafa
0x6db2aafc
0x6db2aafe
0x6db2ab00
0x6db2ab02
0x6db2ab04
0x6db2ab06
0x6db2ab08
0x6db2ab0a
0x6db2ab0c
0x6db2ab0e
0x6db2ab10
0x6db2ab12
0x6db2ab14
0x6db2ab16
0x6db2ab18
0x6db2ab1a
0x6db2ab1c
0x6db2ab1e
0x6db2ab20
0x6db2ab22
0x6db2ab24
0x6db2ab26
0x6db2ab28
0x6db2ab2a
0x6db2ab2c
0x6db2ab2e
0x6db2ab30
0x6db2ab32
0x6db2ab34
0x6db2ab36
0x6db2ab38
0x6db2ab3a
0x6db2ab3c
0x6db2ab3e
0x6db2ab40
0x6db2ab42
0x6db2ab44
0x6db2ab46
0x6db2ab48
0x6db2ab4a
0x6db2ab4c
0x6db2ab4e
0x6db2ab50
0x6db2ab52
0x6db2ab54
0x6db2ab56
0x6db2ab58
0x6db2ab5a
0x6db2ab5c
0x6db2ab5e
0x6db2ab60
0x6db2ab62
0x6db2ab64
0x6db2ab66
0x6db2ab68
0x6db2ab6a
0x6db2ab6c
0x6db2ab6e
0x6db2ab70
0x6db2ab72
0x6db2ab74
0x6db2ab76
0x6db2ab78
0x6db2ab7a
0x6db2ab7c
0x6db2ab7e
0x6db2ab80
0x6db2ab82
0x6db2ab84
0x6db2ab86
0x6db2ab88
0x6db2ab8a
0x6db2ab8c
0x6db2ab8e
0x6db2ab90
0x6db2ab92
0x6db2ab94
0x6db2ab96
0x6db2ab98
0x6db2ab9a
0x6db2ab9c
0x6db2ab9e
0x6db2aba0
0x6db2aba2
0x6db2aba4
0x6db2aba6
0x6db2aba8
0x6db2abaa
0x6db2abac
0x6db2abae
0x6db2abb0
0x6db2abb2
0x6db2abb4
0x6db2abb6
0x6db2abb8
0x6db2abba
0x6db2abbc
0x6db2abbe
0x6db2abc0
0x6db2abc2
0x6db2abc4
0x6db2abc6
0x6db2abc8
0x6db2abca
0x6db2abcc
0x6db2abce
0x6db2abd0
0x6db2abd2
0x6db2abd4
0x6db2abd6
0x6db2abd8
0x6db2abda
0x6db2abdc
0x6db2abde
0x6db2abe0
0x6db2abe2
0x6db2abe4
0x6db2abe6
0x6db2abe8
0x6db2abea
0x6db2abec
0x6db2abee
0x6db2abf0
0x6db2abf2
0x6db2abf4
0x6db2abf6
0x6db2abf8
0x6db2abfa
0x6db2abfc
0x6db2abfe
0x6db2ac00
0x6db2ac02
0x6db2ac04
0x6db2ac06
0x6db2ac08
0x6db2ac0a
0x6db2ac0c
0x6db2ac0e
0x6db2ac10
0x6db2ac12
0x6db2ac14
0x6db2ac16
0x6db2ac18
0x6db2ac1a
0x6db2ac1c
0x6db2ac1e
0x6db2ac20
0x6db2ac22
0x6db2ac24
0x6db2ac26
0x6db2ac28
0x6db2ac2a
0x6db2ac2c
0x6db2ac2e
0x6db2ac30
0x6db2ac32
0x6db2ac34
0x6db2ac36
0x6db2ac38
0x6db2ac3a
0x6db2ac3c
0x6db2ac3e
0x6db2ac40
0x6db2ac42
0x6db2ac44
0x6db2ac46
0x6db2ac48
0x6db2ac4a
0x6db2ac4c
0x6db2ac4e
0x6db2ac50
0x6db2ac52
0x6db2ac54
0x6db2ac56
0x6db2ac58
0x6db2ac5a
0x6db2ac5c
0x6db2ac5e
0x6db2ac60
0x6db2ac62
0x6db2ac64
0x6db2ac66
0x6db2ac68
0x6db2ac6a
0x6db2ac6c
0x6db2ac6e
0x6db2ac70
0x6db2ac72
0x6db2ac74
0x6db2ac76
0x6db2ac78
0x6db2ac7a
0x6db2ac7c
0x6db2ac7e
0x6db2ac80
0x6db2ac82
0x6db2ac84
0x6db2ac86
0x6db2ac88
0x6db2ac8a
0x6db2ac8c
0x6db2ac8e
0x6db2ac90
0x6db2ac92
0x6db2ac94
0x6db2ac96
0x6db2ac98
0x6db2ac9a
0x6db2ac9c
0x6db2ac9e
0x6db2aca0
0x6db2aca2
0x6db2aca4
0x6db2aca6
0x6db2aca8
0x6db2acaa
0x6db2acac
0x6db2acae
0x6db2acb0
0x6db2acb2
0x6db2acb4
0x6db2acb6
0x6db2acb8
0x6db2acba
0x6db2acbc
0x6db2acbe
0x6db2acc0
0x6db2acc2
0x6db2acc4
0x6db2acc6
0x6db2acc8
0x6db2acca
0x6db2accc
0x6db2acce
0x6db2acd0
0x6db2acd2
0x6db2acd4
0x6db2acd6
0x6db2acd8
0x6db2acda
0x6db2acdc
0x6db2acde
0x6db2ace0
0x6db2ace2
0x6db2ace4
0x6db2ace6
0x6db2ace8
0x6db2acea
0x6db2acec
0x6db2acee
0x6db2acf0
0x6db2acf2
0x6db2acf4
0x6db2acf6
0x6db2acf8
0x6db2acfa
0x6db2acfc
0x6db2acfe
0x6db2ad00
0x6db2ad02
0x6db2ad04
0x6db2ad06
0x6db2ad08
0x6db2ad0a
0x6db2ad0c
0x6db2ad0e
0x6db2ad10
0x6db2ad12
0x6db2ad14
0x6db2ad16
0x6db2ad18
0x6db2ad1a
0x6db2ad1c
0x6db2ad1e
0x6db2ad20
0x6db2ad22
0x6db2ad24
0x6db2ad26
0x6db2ad28
0x6db2ad2a
0x6db2ad2c
0x6db2ad2e
0x6db2ad30
0x6db2ad32
0x6db2ad34
0x6db2ad36
0x6db2ad38
0x6db2ad3a
0x6db2ad3c
0x6db2ad3e
0x6db2ad40
0x6db2ad42
0x6db2ad44
0x6db2ad46
0x6db2ad48
0x6db2ad4a
0x6db2ad4c
0x6db2ad4e
0x6db2ad50
0x6db2ad52
0x6db2ad54
0x6db2ad56
0x6db2ad58
0x6db2ad5a
0x6db2ad5c
0x6db2ad5e
0x6db2ad60
0x6db2ad62
0x6db2ad64
0x6db2ad66
0x6db2ad68
0x6db2ad6a
0x6db2ad6c
0x6db2ad6e
0x6db2ad70
0x6db2ad72
0x6db2ad74
0x6db2ad76
0x6db2ad78
0x6db2ad7a
0x6db2ad7c
0x6db2ad7e
0x6db2ad80
0x6db2ad82
0x6db2ad84
0x6db2ad86
0x6db2ad88
0x6db2ad8a
0x6db2ad8c
0x6db2ad8e
0x6db2ad90
0x6db2ad92
0x6db2ad94
0x6db2ad96
0x6db2ad98
0x6db2ad9a
0x6db2ad9c
0x6db2ad9e
0x6db2ada0
0x6db2ada2
0x6db2ada4
0x6db2ada6
0x6db2ada8
0x6db2adaa
0x6db2adac
0x6db2adae
0x6db2adb0
0x6db2adb2
0x6db2adb4
0x6db2adb6
0x6db2adb8
0x6db2adba
0x6db2adbc
0x6db2adbe
0x6db2adc0
0x6db2adc2
0x6db2adc4
0x6db2adc6
0x6db2adc8
0x6db2adca
0x6db2adcc
0x6db2adce
0x6db2add0
0x6db2add2
0x6db2add4
0x6db2add6
0x6db2add8
0x6db2adda
0x6db2addc
0x6db2adde
0x6db2ade0
0x6db2ade2
0x6db2ade4
0x6db2ade6
0x6db2ade8
0x6db2adea
0x6db2adec
0x6db2adee
0x6db2adf0
0x6db2adf2
0x6db2adf4
0x6db2adf6
0x6db2adf8
0x6db2adfa
0x6db2adfc
0x6db2adfe
0x6db2ae00
0x6db2ae02
0x6db2ae04
0x6db2ae06
0x6db2ae08
0x6db2ae0a
0x6db2ae0c
0x6db2ae0e
0x6db2ae10
0x6db2ae12
0x6db2ae14
0x6db2ae16
0x6db2ae18
0x6db2ae1a
0x6db2ae1c
0x6db2ae1e
0x6db2ae20
0x6db2ae22
0x6db2ae24
0x6db2ae26
0x6db2ae28
0x6db2ae2a
0x6db2ae2c
0x6db2ae2e
0x6db2ae30
0x6db2ae32
0x6db2ae34
0x6db2ae36
0x6db2ae38
0x6db2ae3a
0x6db2ae3c
0x6db2ae3e
0x6db2ae40
0x6db2ae42
0x6db2ae44
0x6db2ae46
0x6db2ae48
0x6db2ae4a
0x6db2ae4c
0x6db2ae4e
0x6db2ae50
0x6db2ae52
0x6db2ae54
0x6db2ae56
0x6db2ae58
0x6db2ae5a
0x6db2ae5c
0x6db2ae5e
0x6db2ae60
0x6db2ae62
0x6db2ae64
0x6db2ae66
0x6db2ae68
0x6db2ae6a
0x6db2ae6c
0x6db2ae6e
0x6db2ae70
0x6db2ae72
0x6db2ae74
0x6db2ae76
0x6db2ae78
0x6db2ae7a
0x6db2ae7c
0x6db2ae7e
0x6db2ae80
0x6db2ae82
0x6db2ae84
0x6db2ae86
0x6db2ae88
0x6db2ae8a
0x6db2ae8c
0x6db2ae8e
0x6db2ae90
0x6db2ae92
0x6db2ae94
0x6db2ae96
0x6db2ae98
0x6db2ae9a
0x6db2ae9c
0x6db2ae9e
0x6db2aea0
0x6db2aea2
0x6db2aea4
0x6db2aea6
0x6db2aea8
0x6db2aeaa
0x6db2aeac
0x6db2aeae
0x6db2aeb0
0x6db2aeb2
0x6db2aeb4
0x6db2aeb6
0x6db2aeb8
0x6db2aeba
0x6db2aebc
0x6db2aebe
0x6db2aec0
0x6db2aec2
0x6db2aec4
0x6db2aec6
0x6db2aec8
0x6db2aeca
0x6db2aecc
0x6db2aece
0x6db2aed0
0x6db2aed2
0x6db2aed4
0x6db2aed6
0x6db2aed8
0x6db2aeda
0x6db2aedc
0x6db2aede
0x6db2aee0
0x6db2aee2
0x6db2aee4
0x6db2aee6
0x6db2aee8
0x6db2aeea
0x6db2aeec
0x6db2aeee
0x6db2aef0
0x6db2aef2
0x6db2aef4
0x6db2aef6
0x6db2aef8
0x6db2aefa
0x6db2aefc
0x6db2aefe
0x6db2af00
0x6db2af02
0x6db2af04
0x6db2af06
0x6db2af08
0x6db2af0a
0x6db2af0c
0x6db2af0e
0x6db2af10
0x6db2af12
0x6db2af14
0x6db2af16
0x6db2af18
0x6db2af1a
0x6db2af1c
0x6db2af1e
0x6db2af20
0x6db2af22
0x6db2af24
0x6db2af26
0x6db2af28
0x6db2af2a
0x6db2af2c
0x6db2af2e
0x6db2af30
0x6db2af32
0x6db2af34
0x6db2af36
0x6db2af38
0x6db2af3a
0x6db2af3c
0x6db2af3e
0x6db2af40
0x6db2af42
0x6db2af44
0x6db2af46
0x6db2af48
0x6db2af4a
0x6db2af4c
0x6db2af4e
0x6db2af50
0x6db2af52
0x6db2af54
0x6db2af56
0x6db2af58
0x6db2af5a
0x6db2af5c
0x6db2af5e
0x6db2af60
0x6db2af62
0x6db2af64
0x6db2af66
0x6db2af68
0x6db2af6a
0x6db2af6c
0x6db2af6e
0x6db2af70
0x6db2af72
0x6db2af74
0x6db2af76
0x6db2af78
0x6db2af7a
0x6db2af7c
0x6db2af7e
0x6db2af80
0x6db2af82
0x6db2af84
0x6db2af86
0x6db2af88
0x6db2af8a
0x6db2af8c
0x6db2af8e
0x6db2af90
0x6db2af92
0x6db2af94
0x6db2af96
0x6db2af98
0x6db2af9a
0x6db2af9c
0x6db2af9e
0x6db2afa0
0x6db2afa2
0x6db2afa4
0x6db2afa6
0x6db2afa8
0x6db2afaa
0x6db2afac
0x6db2afae
0x6db2afb0
0x6db2afb2
0x6db2afb4
0x6db2afb6
0x6db2afb8
0x6db2afba
0x6db2afbc
0x6db2afbe
0x6db2afc0
0x6db2afc2
0x6db2afc4
0x6db2afc6
0x6db2afc8
0x6db2afca
0x6db2afcc
0x6db2afce
0x6db2afd0
0x6db2afd2
0x6db2afd4
0x6db2afd6
0x6db2afd8
0x6db2afda
0x6db2afdc
0x6db2afde
0x6db2afe0
0x6db2afe2
0x6db2afe4
0x6db2afe6
0x6db2afe8
0x6db2afea
0x6db2afec
0x6db2afee
0x6db2aff0
0x6db2aff2
0x6db2aff4
0x6db2aff6
0x6db2aff8
0x6db2affa
0x6db2affc
0x6db2affe
0x6db2affe
0x6db2b000
0x6db2b001
0x6db2b064
0x6db2b064
0x6db2b067
0x00000000
0x00000000
0x00000000
0x00000000
0x6db2b003
0x6db2b003
0x6db2b034
0x6db2b034
0x6db2b035
0x00000000
0x6db2b037
0x6db2b037
0x00000000
0x6db2b037
0x6db2b005
0x6db2b005
0x6db2b074
0x6db2b074
0x00000000
0x6db2b007
0x6db2b007
0x6db2b038
0x6db2b038
0x6db2b069
0x6db2b069
0x00000000
0x6db2b06c
0x6db2b06c
0x6db2b071
0x6db2b071
0x00000000
0x6db2b071
0x6db2b03a
0x6db2b03a
0x6db2b0a5
0x6db2b0c7
0x6db2b0c7
0x00000000
0x6db2b0a7
0x6db2b0a7
0x6db2b0aa
0x6db2b0ac
0x6db2b0ac
0x6db2b0ad
0x00000000
0x6db2b0af
0x6db2b0af
0x00000000
0x6db2b0b2
0x6db2b0b2
0x6db2b0b2
0x00000000
0x6db2b0b2
0x6db2b0af
0x6db2b0ad
0x6db2b03c
0x6db2b03c
0x6db2b03d
0x6db2b0b3
0x6db2b0b3
0x6db2b0b4
0x00000000
0x6db2b03f
0x6db2b03f
0x6db2b044
0x6db2b075
0x6db2b075
0x6db2b07a
0x6db2b07b
0x6db2b07c
0x6db2b07d
0x6db2b07d
0x6db2b07e
0x6db2b07f
0x00000000
0x6db2b046
0x6db2b046
0x6db2b0ba
0x6db2b0ba
0x6db2b0be
0x6db2b0be
0x6db2b048
0x6db2b048
0x6db2b04a
0x6db2b04d
0x6db2b0b8
0x6db2b0b8
0x6db2b0b8
0x00000000
0x6db2b04f
0x6db2b04f
0x6db2b080
0x6db2b080
0x6db2b081
0x6db2b082
0x6db2b083
0x6db2b085
0x6db2b089
0x6db2b089
0x6db2b08b
0x6db2b08e
0x00000000
0x6db2b090
0x6db2b090
0x00000000
0x6db2b093
0x6db2b093
0x6db2b0b5
0x6db2b0b5
0x6db2b0b5
0x6db2b0b5
0x00000000
0x6db2b095
0x6db2b095
0x6db2b095
0x6db2b097
0x6db2b097
0x6db2b09a
0x00000000
0x6db2b09c
0x6db2b09c
0x6db2b09c
0x6db2b0a0
0x6db2b0a0
0x6db2b0a0
0x6db2b0a0
0x6db2b09a
0x6db2b093
0x6db2b090
0x6db2b052
0x6db2b052
0x6db2b054
0x6db2b056
0x6db2b056
0x6db2b056
0x6db2b059
0x6db2b0cd
0x6db2b0cd
0x6db2b0ce
0x6db2b0ce
0x6db2b0d2
0x6db2b0d2
0x6db2b0d7
0x6db2b0d7
0x6db2b0d7
0x6db2b0da
0x6db2b0fc
0x6db2b0fc
0x6db2b0fd
0x00000000
0x6db2b0ff
0x6db2b0ff
0x00000000
0x6db2b101
0x6db2b101
0x00000000
0x00000000
0x00000000
0x00000000
0x6db2b101
0x6db2b0ff
0x6db2b0dc
0x6db2b0e3
0x6db2b0e4
0x6db2b0e9
0x6db2b0e9
0x6db2b0e9
0x6db2b0eb
0x6db2b0f0
0x6db2b12f
0x6db2b12f
0x6db2b130
0x6db2b130
0x6db2b0f2
0x6db2b0f2
0x6db2b0f2
0x6db2b0f2
0x6db2b0f7
0x6db2b103
0x6db2b103
0x6db2b134
0x00000000
0x6db2b136
0x6db2b136
0x00000000
0x6db2b138
0x6db2b138
0x6db2b139
0x00000000
0x6db2b13b
0x6db2b13b
0x6db2b140
0x00000000
0x6db2b142
0x6db2b142
0x6db2b1b6
0x6db2b1b6
0x00000000
0x6db2b144
0x6db2b144
0x6db2b146
0x00000000
0x6db2b148
0x6db2b148
0x00000000
0x6db2b148
0x6db2b146
0x6db2b142
0x6db2b140
0x6db2b139
0x6db2b136
0x6db2b105
0x6db2b105
0x6db2b108
0x6db2b109
0x6db2b10b
0x6db2b10c
0x6db2b10c
0x6db2b10e
0x6db2b10e
0x6db2b111
0x6db2b149
0x6db2b149
0x6db2b14a
0x6db2b14d
0x6db2b14f
0x6db2b151
0x6db2b151
0x6db2b153
0x00000000
0x00000000
0x00000000
0x00000000
0x6db2b113
0x6db2b113
0x6db2b115
0x6db2b115
0x6db2b115
0x6db2b11b
0x6db2b120
0x6db2b122
0x6db2b122
0x6db2b123
0x6db2b123
0x6db2b126
0x6db2b126
0x6db2b155
0x6db2b155
0x6db2b156
0x6db2b157
0x6db2b15a
0x00000000
0x6db2b15c
0x6db2b15c
0x6db2b15e
0x6db2b15e
0x00000000
0x6db2b15e
0x6db2b128
0x6db2b128
0x6db2b160
0x6db2b160
0x6db2b1ce
0x6db2b1ce
0x6db2b1d7
0x6db2b1da
0x6db2b1db
0x6db2b1db
0x6db2b1df
0x6db2b1e3
0x6db2b1ed
0x6db2b1ed
0x6db2b1f0
0x6db2b1f0
0x6db2b162
0x6db2b162
0x6db2b162
0x6db2b165
0x6db2b165
0x6db2b1c8
0x6db2b1c8
0x6db2b1c8
0x6db2b1ca
0x6db2b1cb
0x6db2b1cc
0x6db2b1cc
0x6db2b1cd
0x6db2b1cd
0x00000000
0x6db2b167
0x6db2b167
0x6db2b168
0x6db2b168
0x6db2b170
0x6db2b170
0x6db2b170
0x6db2b171
0x6db2b171
0x6db2b172
0x6db2b173
0x6db2b174
0x6db2b175
0x6db2b176
0x6db2b179
0x6db2b17b
0x6db2b17b
0x6db2b17c
0x6db2b17c
0x6db2b17f
0x6db2b17f
0x6db2b181
0x6db2b1ff
0x6db2b1ff
0x6db2b183
0x6db2b183
0x6db2b184
0x6db2b185
0x6db2b188
0x6db2b1aa
0x6db2b1aa
0x6db2b1ac
0x6db2b1ac
0x6db2b1af
0x6db2b1af
0x6db2b1b2
0x6db2b1b2
0x6db2b18a
0x6db2b18a
0x6db2b18c
0x6db2b18f
0x6db2b190
0x6db2b190
0x6db2b192
0x6db2b196
0x6db2b1b8
0x6db2b1b8
0x6db2b1bf
0x6db2b1bf
0x6db2b1c1
0x6db2b1c2
0x6db2b1c2
0x00000000
0x6db2b198
0x6db2b198
0x6db2b19b
0x6db2b19b
0x6db2b19c
0x6db2b19e
0x6db2b1a0
0x6db2b1a0
0x6db2b1a1
0x6db2b1a1
0x6db2b216
0x6db2b219
0x00000000
0x6db2b1a3
0x6db2b1a3
0x6db2b1a4
0x6db2b21a
0x6db2b21a
0x6db2b221
0x6db2b227
0x6db2b227
0x6db2b227
0x6db2b22a
0x6db2b22b
0x6db2b1a6
0x6db2b1a6
0x6db2b1a6
0x00000000
0x6db2b1a6
0x6db2b1a4
0x6db2b1a1
0x6db2b196
0x6db2b188
0x6db2b181
0x6db2b165
0x6db2b12a
0x6db2b12a
0x6db2b12c
0x6db2b12d
0x6db2b12d
0x00000000
0x6db2b12d
0x6db2b128
0x6db2b126
0x6db2b111
0x6db2b0f9
0x6db2b0f9
0x6db2b0f9
0x6db2b0fb
0x6db2b0fb
0x00000000
0x6db2b0fb
0x6db2b0f7
0x6db2b0f0
0x6db2b05b
0x6db2b05b
0x6db2b062
0x6db2b062
0x00000000
0x6db2b062
0x6db2b059
0x6db2b04f
0x6db2b04d
0x6db2b046
0x6db2b044
0x6db2b03d
0x6db2b03a
0x6db2b009
0x6db2b009
0x6db2b00c
0x6db2b00d
0x6db2b00f
0x6db2b017
0x6db2b019
0x6db2b024
0x6db2b026
0x6db2b027
0x6db2b02e
0x6db2b030
0x6db2b031
0x6db2b031
0x00000000
0x6db2b031
0x6db2b007
0x6db2b005
0x6db2b003
0x6db2b2b2
0x6db2b2b2
0x6db24bcb
0x6db24bce
0x6db24bd1
0x6db24bd7
0x6db24bde
0x6db24be5
0x6db24bee
0x6db24bf6
0x6db24bfa
0x6db24bfd
0x6db24c03
0x6db24c06
0x6db24c08
0x00000000
0x6db24c0e
0x6db24c19
0x6db24c19
0x6db24c08
0x6db24bc5
0x6db24b22
0x6db24afc
0x6db24afc
0x6db24b05
0x6db24b05
0x6db24a39
0x6db24a39
0x6db24a45
0x6db24a45
0x6db24a37

APIs

pthread_spin_destroy.LIBWINPTHREAD-1 ref: 6DB24A2F
GetCurrentThreadId.KERNEL32 ref: 6DB24A70
_ultoa.MSVCRT ref: 6DB24A89
OutputDebugStringA.KERNEL32 ref: 6DB24AC0
abort.MSVCRT(00000000), ref: 6DB24AC7
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6DB25ADA,?,?,?,?,6DB26ADD), ref: 6DB24AED

Strings

Error cleaning up spin_keys for thread , xrefs: 6DB24A57, 6DB24AD2

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CurrentDebugOutputStringThreadValue_ultoaabortpthread_spin_destroy
String ID: Error cleaning up spin_keys for thread
API String ID: 3968433069-2906507043
Opcode ID: 310810a3bbb7741e7f9c6b2ddf5d6eacf7075fdc200639ae9f822f2946225d52
Instruction ID: 7d84d091099a4b2c5d596df515c3e5fb64742da84c8d98059befd925ca1e4be4
Opcode Fuzzy Hash: 310810a3bbb7741e7f9c6b2ddf5d6eacf7075fdc200639ae9f822f2946225d52
Instruction Fuzzy Hash: B821C2736083819BDB005B79E88877ABBF4EB9B314F010A28E5A9C768CD774C444CB56

Uniqueness

Uniqueness Score: -1.00%

Function 6DB21517 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 37COMMON

Download Yara Rule

APIs

pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB21530
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB21555
fprintf.MSVCRT ref: 6DB21592
exit.MSVCRT ref: 6DB2159E

Strings

Assertion failed: (%s), file %s, line %d, xrefs: 6DB21587
(((barrier_t *)*barrier)->valid == LIFE_BARRIER) && (((barrier_t *)*barrier)->busy > 0), xrefs: 6DB2157F
&, xrefs: 6DB2156F

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: exitfprintfpthread_spin_lockpthread_spin_unlock
String ID: &$(((barrier_t *)*barrier)->valid == LIFE_BARRIER) && (((barrier_t *)*barrier)->busy > 0)$Assertion failed: (%s), file %s, line %d
API String ID: 2153800997-196132075
Opcode ID: 1e2ed9c072267354bd578d2178fb5263f7956cb0b82ae7b880e1baf866cad0e6
Instruction ID: cdc714415f8d8bed40358721750ffe1f1484d396c067150e0778056e76c36111
Opcode Fuzzy Hash: 1e2ed9c072267354bd578d2178fb5263f7956cb0b82ae7b880e1baf866cad0e6
Instruction Fuzzy Hash: EC011A72518291CFCB10DF24D489B6ABBE4FF45304F06885CE69D6B208C736A844CF93

Uniqueness

Uniqueness Score: -1.00%

Function 6DB277B0 Relevance: 12.1, APIs: 8, Instructions: 138timethreadCOMMON

Download Yara Rule

APIs

QueryPerformanceFrequency.KERNEL32 ref: 6DB277E6
QueryPerformanceCounter.KERNEL32 ref: 6DB277FE
GetCurrentThread.KERNEL32 ref: 6DB278B9
GetThreadTimes.KERNEL32 ref: 6DB278E2
GetCurrentProcess.KERNEL32 ref: 6DB27950
GetProcessTimes.KERNEL32 ref: 6DB27979
_errno.MSVCRT ref: 6DB2798A
GetSystemTimeAsFileTime.KERNEL32 ref: 6DB279AF

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CurrentPerformanceProcessQueryThreadTimeTimes$CounterFileFrequencySystem_errno
String ID:
API String ID: 3786581644-0
Opcode ID: 37bb0564aecc73a4b2a3aede242e291aa5fbfd437bd3bda4a49fc30f3a693094
Instruction ID: 38a496b07f4cd07393deacdf84d7d681cdb41ec1c6d845c2da5dd6f8475a178d
Opcode Fuzzy Hash: 37bb0564aecc73a4b2a3aede242e291aa5fbfd437bd3bda4a49fc30f3a693094
Instruction Fuzzy Hash: 7451EDB69083419FC700EF29C58466ABBF1FFC9754F05892EE89997218E375D944CF82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB240A0 Relevance: 12.1, APIs: 8, Instructions: 133
COMMON

Download Yara Rule

C-Code - Quality: 49%

			E6DB240A0(void* __ecx, void* __edx, intOrPtr* _a4, intOrPtr _a8) {
				intOrPtr _v32;
				intOrPtr _v36;
				char _v40;
				signed int _v48;
				signed int _v52;
				intOrPtr _v68;
				intOrPtr _v72;
				void* __ebx;
				void* __esi;
				void* _t45;
				signed int _t47;
				signed int _t51;
				signed int _t54;
				signed int _t62;
				intOrPtr* _t64;
				intOrPtr* _t67;
				intOrPtr* _t68;
				signed int _t71;
				signed int _t73;
				signed int _t74;
				signed int _t78;
				signed int _t80;
				intOrPtr _t82;
				intOrPtr _t85;
				intOrPtr _t86;
				intOrPtr _t87;
				void* _t88;
				intOrPtr* _t89;

				_t89 = _t88 - 0x3c;
				_t68 = _a4;
				if(_t68 == 0 || _a8 == 0) {
					return 0x16;
				} else {
					_t45 = E6DB23AC0(_t68);
					if(_t45 == 0) {
						_t85 =  *_t68;
						_t86 = _t85 + 0x14;
						_v72 = _a8;
						 *_t89 = _t86;
						_t47 = E6DB23100(__edx);
						__eflags = _t47;
						if(_t47 != 0) {
							return E6DB237D0(_t68, _t68, _t47, _t85);
						} else {
							_t82 = _t85 + 0x18;
							 *_t89 = _t82;
							_v72 = _a8;
							_t51 = E6DB23100(__edx);
							_t78 = _t51;
							__eflags = _t51;
							if(_t51 != 0) {
								 *_t89 = _t86;
								_v52 = _t51;
								E6DB232E0();
								_t45 = E6DB237D0(_t68, _t68, _v52, _t85);
								goto L3;
							} else {
								__eflags =  *(_t85 + 8);
								if( *(_t85 + 8) == 0) {
									_t71 =  *(_t85 + 0x10);
									_t54 =  *(_t85 + 0xc);
									__eflags = _t71;
									if(_t71 > 0) {
										_t54 = _t54 - _t71;
										__eflags = _t54;
										 *(_t85 + 0x10) = 0;
										 *(_t85 + 0xc) = _t54;
									}
									__eflags = _t54;
									if(__eflags <= 0) {
										goto L7;
									} else {
										_v52 = _t78;
										_t87 = _t85 + 0x1c;
										 *(_t85 + 0x10) =  ~_t54;
										_v40 = 0x6db237b0;
										_v36 = _t85;
										_v32 =  *((intOrPtr*)(E6DB25870(__eflags)));
										asm("lock or dword [esp], 0x0");
										 *((intOrPtr*)(E6DB25870(__eflags))) =  &_v40;
										asm("lock or dword [esp], 0x0");
										_t80 = _v52;
										while(1) {
											_v72 = _t82;
											 *_t89 = _t87;
											_v68 = _a8;
											_v52 = _t80;
											_t62 = E6DB22B40();
											_t80 = _v52;
											_t73 = _t62;
											__eflags =  *(_t85 + 0x10);
											if(__eflags >= 0) {
												break;
											}
											__eflags = _t73;
											if(__eflags != 0) {
												_v52 = _t73;
												_t64 = E6DB25870(__eflags);
												_t74 = _v52;
												 *_t64 = _v32;
												L21:
												_v52 = _t74;
												 *_t89 = _v36;
												_v40();
												_t78 = _v52;
											} else {
												continue;
											}
											goto L8;
										}
										_v48 = _t73;
										_v52 = _t80;
										_t67 = E6DB25870(__eflags);
										_t74 = _v48;
										_t78 = _v52;
										__eflags = _t74;
										 *_t67 = _v32;
										if(_t74 != 0) {
											goto L21;
										} else {
											 *(_t85 + 0xc) = 0;
											goto L7;
										}
									}
								} else {
									L7:
									asm("lock add dword [esi+0x8], 0x1");
								}
								L8:
								return E6DB237D0(_t68, _t68, _t78, _t85);
							}
						}
					} else {
						L3:
						return _t45;
					}
				}
			}

0x6db240a4
0x6db240a7
0x6db240ad
0x6db24134
0x6db240b7
0x6db240b9
0x6db240c0
0x6db240d0
0x6db240d6
0x6db240d9
0x6db240dd
0x6db240e0
0x6db240e5
0x6db240e7
0x6db24148
0x6db240e9
0x6db240ed
0x6db240f0
0x6db240f3
0x6db240f7
0x6db240fc
0x6db240fe
0x6db24100
0x6db24208
0x6db2420b
0x6db2420f
0x6db2421a
0x00000000
0x6db24106
0x6db24109
0x6db2410b
0x6db24150
0x6db24153
0x6db24156
0x6db24158
0x6db2415a
0x6db2415a
0x6db2415c
0x6db24163
0x6db24163
0x6db24166
0x6db24168
0x00000000
0x6db2416a
0x6db2416c
0x6db24170
0x6db24173
0x6db24176
0x6db2417e
0x6db24189
0x6db2418d
0x6db2419b
0x6db2419d
0x6db241a2
0x6db241b4
0x6db241b8
0x6db241bc
0x6db241bf
0x6db241c3
0x6db241c7
0x6db241cc
0x6db241d0
0x6db241d5
0x6db241d7
0x00000000
0x00000000
0x6db241b0
0x6db241b2
0x6db24228
0x6db2422c
0x6db24235
0x6db24239
0x6db2423b
0x6db2423f
0x6db24243
0x6db24246
0x6db2424e
0x00000000
0x00000000
0x00000000
0x00000000
0x6db241b2
0x6db241d9
0x6db241dd
0x6db241e1
0x6db241e6
0x6db241ee
0x6db241f2
0x6db241f4
0x6db241f6
0x00000000
0x6db241f8
0x6db241f8
0x00000000
0x6db241f8
0x6db241f6
0x6db2410d
0x6db2410d
0x6db2410d
0x6db2410d
0x6db24112
0x6db24120
0x6db24120
0x6db24100
0x6db240c2
0x6db240c2
0x6db240c9
0x6db240c9
0x6db240c0

APIs

Part of subcall function 6DB23AC0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,6DB23C32), ref: 6DB23AD8
Part of subcall function 6DB23AC0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,6DB23C32), ref: 6DB23AEA

pthread_mutex_timedlock.LIBWINPTHREAD-1 ref: 6DB240E0
pthread_mutex_timedlock.LIBWINPTHREAD-1 ref: 6DB240F7

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_timedlock$pthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 2118215603-0
Opcode ID: bef2ca78b68cd805a4678b79130e86cc3ce7519d42a358e1df141461c8afaa6e
Instruction ID: 63f1d9b46c21b829a2b9795dd2b7dd3c8e5228e7f14853fb1780fa195df644d1
Opcode Fuzzy Hash: bef2ca78b68cd805a4678b79130e86cc3ce7519d42a358e1df141461c8afaa6e
Instruction Fuzzy Hash: EC4139766083428FD714DF25D48162FBBE0EFA8355F01892DE98D97728D734E9498F82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB229C6 Relevance: 12.1, APIs: 8, Instructions: 101COMMON

Download Yara Rule

APIs

_pthread_rel_time_in_ms.LIBWINPTHREAD-1 ref: 6DB22A16

Part of subcall function 6DB22D00: GetSystemTimeAsFileTime.KERNEL32 ref: 6DB22D49

RtlEnterCriticalSection.NTDLL ref: 6DB22A36
RtlLeaveCriticalSection.NTDLL ref: 6DB22A46
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB22A6F
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB22A7F
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB22A92
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB22A9F
_pthread_time_in_ms_from_timespec.LIBWINPTHREAD-1 ref: 6DB22AC8

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_getclean$CriticalSectionTime$EnterFileLeaveSystem_pthread_rel_time_in_ms_pthread_time_in_ms_from_timespecpthread_mutex_unlock
String ID:
API String ID: 3334244777-0
Opcode ID: 13ed713ae58df9311ed34b1a7ee4c94f9caa7e905dbc8d1b48fa5632a43a775a
Instruction ID: 73dc1eaf32cd433fa871bdb81ebc4a29b4ed89f6b99967855ecf2a79fc28dc6b
Opcode Fuzzy Hash: 13ed713ae58df9311ed34b1a7ee4c94f9caa7e905dbc8d1b48fa5632a43a775a
Instruction Fuzzy Hash: 2D4147765187419FD720DF29C88063ABBE4FF89368F414A6DE999DB358D730D900CB82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24C60 Relevance: 12.1, APIs: 8, Instructions: 72COMMON

Download Yara Rule

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1(?,?,?,?,?,?,00000000,?,?,?,6DB258D2,?,?,?,0000001C,6DB25A6F), ref: 6DB24C6A

Part of subcall function 6DB24C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C36
Part of subcall function 6DB24C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C4B

pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB24C8B
pthread_rwlock_rdlock.LIBWINPTHREAD-1 ref: 6DB24CCE
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB24CF2
pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB24D05
pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6DB24D1C
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB24D29
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB24D53

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_spin_unlock$pthread_spin_lock$__pth_gpointer_lockedpthread_mutex_lockpthread_mutex_unlockpthread_rwlock_rdlockpthread_rwlock_unlock
String ID:
API String ID: 4251901166-0
Opcode ID: 9dd15105b8f2b1b0e51ec0ae322eab16788ba6adf32f5dd9da2bf168fdf8af6d
Instruction ID: f05b46671930cde444a8a375288619a443109e4cb90cd1b0643527f46afe0eb1
Opcode Fuzzy Hash: 9dd15105b8f2b1b0e51ec0ae322eab16788ba6adf32f5dd9da2bf168fdf8af6d
Instruction Fuzzy Hash: 59219A7290868A8FC710AF2AD480A3EBBB0FF58354F02081DD5890BE19DB35E584CF92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24B06 Relevance: 12.1, APIs: 8, Instructions: 67
threadCOMMON

Download Yara Rule

C-Code - Quality: 97%

			E6DB24B06(void* __ecx) {
				void* _t76;

				__esi = E6DB248D0(__eflags);
				__eax =  *0x6db30020;
				__eflags =  *0x6db30020;
				if( *0x6db30020 == 0) {
					L1:
					return _t76;
				} else {
					__eflags = __esi;
					if(__esi == 0) {
						goto L1;
					} else {
						 *(__esi + 0x24) = 1;
						 *((intOrPtr*)(__esi + 0x3c)) = GetCurrentThreadId();
						__eax = CreateEventA(0, 1, 0, 0);
						 *((intOrPtr*)(__esi + 0x1c)) = 0xffffffff;
						 *(__esi + 0x18) = __eax;
						__esp = __esp - 0x10;
						_t8 = __esi + 0x38; // 0x38
						_t8 = E6DB24A20(_t8, __ebx, __edi, __esi);
						__ebp =  *0x6db2f1a0;
						 *(__esi + 0x64) = 0;
						 *(__esi + 0x14) = 0;
						__edi = GetCurrentProcess();
						__ebx = GetCurrentThread();
						__eax = GetCurrentProcess();
						_t11 = __esi + 0x14; // 0x14
						__edx = _t11;
						__eax = DuplicateHandle(__eax, __ebx, __edi, __edx, 0, 0, 2);
						__esp = __esp - 0x1c;
						__eflags = __eax;
						if(__eax == 0) {
							L7:
							abort();
							__eax =  *0;
							asm("ud2");
							__eax =  *(__esp + 0x1c);
							 *0 =  *(__esp + 0x1c);
							asm("ud2");
							__eax = __esp + 0x14;
							 *0 = __eax;
							asm("ud2");
							asm("invalid");
							asm("invalid");
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							asm("invalid");
							asm("invalid");
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							 *__eax = __al +  *__eax;
							__eflags =  *__eax;
							asm("das");
							if(__eflags <= 0) {
								L26:
								asm("bound esp, [ecx+0x72]");
								if(__eflags < 0) {
									goto L48;
								} else {
									goto L27;
								}
							} else {
								if(__eflags < 0) {
									L15:
									asm("popad");
									if(__eflags < 0) {
										goto L36;
									} else {
										if (__eflags >= 0) goto L27;
										goto L17;
									}
								} else {
									if(__eflags == 0) {
										L29:
										__eflags = __eax - 0x494c203d;
										goto L30;
									} else {
										if(__eflags < 0) {
											L17:
											if(__eflags >= 0) {
												L27:
												if(__eflags < 0) {
													goto L34;
												} else {
													__eax = __eax - 0x6c61763e;
													__esp =  *(__eax + 0x3d) * 0x494c203d;
													__eflags = __esp;
													goto L29;
												}
											} else {
												if(__eflags > 0) {
													if(__eflags >= 0) {
														 *[gs:0x6c202c73] =  *[gs:0x6c202c73] & __ah;
														__eflags =  *[gs:0x6c202c73];
														goto L47;
													} else {
														 *[ds:eax] =  *[ds:eax] & __dh;
														 *__eax =  *__eax - __eax;
														__ecx = __ecx + 1;
														__eflags = __ecx;
														if(__eflags >= 0) {
															goto L61;
														} else {
															if(__eflags < 0) {
																goto L62;
															} else {
																__ebp =  *(__edi + 0x6e) * 0x69616620;
																__eflags = __ebp;
																goto L41;
															}
														}
													}
												} else {
													asm("outsb");
													if(__eflags < 0) {
														L41:
														asm("outsd");
														asm("outsb");
														goto L42;
													} else {
														_push(0x64616572);
														if(__eflags >= 0) {
															L30:
															__eflags = __eax - 0x46494c20;
															__ebp = __ebp + 1;
															_pop(__edi);
															__edx =  &(__edx[0]);
															__ecx = __ecx + 1;
															__eflags = __ecx;
															_push(__edx);
															_push(__edx);
															goto L31;
														} else {
															if(__eflags >= 0) {
																L44:
																__eflags = __ah -  *[fs:eax];
																 *0x202c2973 =  *0x202c2973 - __ah;
																__eflags =  *0x202c2973;
															} else {
																asm("arpl [edi], bp");
																asm("bound esp, [ecx+0x72]");
																if(__eflags < 0) {
																	L43:
																	__ebp =  *(__ebp + 0x64) * 0x2528203a;
																	__eflags = __ebp;
																	goto L44;
																} else {
																	if(__eflags < 0) {
																		L31:
																		__ecx = __ecx - 1;
																		__ebp = __ebp + 1;
																		_push(__edx);
																		 *__eax =  *__eax - __esp;
																		 *[es:eax] =  *[es:eax] & __ch;
																		 *__eax =  *__eax - __ch;
																		__eflags =  *__eax;
																		asm("bound esp, [ecx+0x72]");
																		if(__eflags < 0) {
																			goto L52;
																		} else {
																			if(__eflags < 0) {
																				goto L51;
																			} else {
																				if(__eflags == 0) {
																					L42:
																					_t38 = __esi + 0x61;
																					 *_t38 =  *(__esi + 0x61) & __ah;
																					__eflags =  *_t38;
																					goto L43;
																				} else {
																					L34:
																					__ch = __ch -  *__ecx;
																					__ah = __ah - __edx[0x18];
																					__eflags = __ah;
																					if(__eflags < 0) {
																						goto L58;
																					} else {
																						__esp =  *(__ebp + 0x72) * 0x623e2d29;
																						__eflags = __esp;
																						L36:
																						__eax = __eax - 0x7375623e;
																						__eflags = __eax;
																					}
																				}
																			}
																		}
																	} else {
																		asm("arpl [eax], ax");
																		 *__eax =  *__eax - __ch;
																		_t31 =  &(__edx[0x18]);
																		 *_t31 = __edx[0x18] - __ah;
																		__eflags =  *_t31;
																		if( *_t31 < 0) {
																			L47:
																			asm("insb");
																			__ebp =  *(__esi + 0x65) * 0xa642520;
																			__eflags = __ebp;
																			L48:
																			__eax = __eax & 0x00000a64;
																			_t43 = __ebx + 0x25;
																			 *_t43 =  *(__ebx + 0x25) + __al;
																			__eflags =  *_t43;
																			if(__eflags < 0) {
																				L53:
																				asm("das");
																				if(__eflags <= 0) {
																					goto L79;
																				} else {
																					if(__eflags < 0) {
																						goto L66;
																					} else {
																						if(__eflags == 0) {
																							goto L83;
																						} else {
																							goto L56;
																						}
																					}
																				}
																			} else {
																				__eax = __eax & 0x73252064;
																				__al = __al |  *__eax;
																				__ebx = __ebx + 1;
																				__eax = __eax & 0x64252070;
																				_t45 = __esi + 0x3d;
																				 *_t45 =  *(__esi + 0x3d) & __dl;
																				__eflags =  *_t45;
																				__eflags = __eax - 0x20583025;
																				if(__eflags > 0) {
																					L65:
																					if (__eflags < 0) goto L88;
																					L66:
																					asm("popad");
																				} else {
																					L51:
																					__eax = __eax & 0x2520646c;
																					__eflags = __eax;
																					if(__eflags >= 0) {
																						L56:
																						if(__eflags < 0) {
																							if(__eflags >= 0) {
																								goto L81;
																							} else {
																								if(__eflags > 0) {
																									goto L91;
																								} else {
																									asm("outsb");
																									if(__eflags < 0) {
																										goto L96;
																									} else {
																										_push(0x64616572);
																										if(__eflags >= 0) {
																											goto L84;
																										} else {
																											if(__eflags >= 0) {
																												__al = __al - 0x20;
																												__eflags = __al;
																												goto L98;
																											} else {
																												asm("arpl [edi], bp");
																												if(__eflags < 0) {
																													goto L99;
																												} else {
																													asm("insb");
																													goto L76;
																												}
																											}
																										}
																									}
																								}
																							}
																						} else {
																							asm("bound esi, [ebp+0x69]");
																							asm("insb");
																							asm("das");
																							asm("insd");
																							__ebp =  *(__esi + 0x67) * 0x36772d77;
																							__eflags = __ebp;
																							L58:
																							asm("a16 ja 0x30");
																							if(__eflags > 0) {
																								L76:
																								asm("outsd");
																								asm("arpl [ebx+0x2e], bp");
																								asm("arpl [eax], ax");
																								 *__eax =  *__eax + __ch;
																								 *__eax =  *__eax - __ch;
																								__eflags =  *__eax;
																								if(__eflags < 0) {
																									goto L101;
																								} else {
																									goto L77;
																								}
																							} else {
																								__al = __al ^ 0x0000002d;
																								_t48 = __ecx + 0x31;
																								 *_t48 =  *(__ecx + 0x31) ^ __ah;
																								__eflags =  *_t48;
																								__al = __al ^ 0x00000039;
																								__eax = __eax ^ 0x64383734;
																								__eflags =  *__edi - __ch;
																								L61:
																								asm("insd");
																								__ebp =  *(__esi + 0x67) * 0x36772d77;
																								__eflags = __ebp;
																								L62:
																								if(__eflags > 0) {
																									L77:
																									asm("insb");
																									asm("outsd");
																									asm("arpl [ebx+0x5f], bp");
																									if(__eflags == 0) {
																										goto L85;
																									} else {
																										__ch = __ch -  *__ecx;
																										__dh = __dh - __edx[0x1d];
																										__eflags = __dh;
																										goto L79;
																									}
																								} else {
																									if(__eflags > 0) {
																										L79:
																										if(__eflags > 0) {
																											L102:
																											if(__eflags >= 0) {
																												__eax = __eax & 0x73252064;
																												__al = __al |  *__eax;
																												__edx[0x15] = __edx[0x15] + __dl;
																												__esp = __esp - 1;
																												__eax = __eax & 0x64252070;
																												__eflags = __eax;
																												 *[fs:esi+0x3d] =  *[fs:esi+0x3d] & __dl;
																												__eax = __eax & 0x42205830;
																												__eax - 0x72206425 = __eax - 0x20646c25;
																											}
																											 *[fs:edi+0x3d] =  *[fs:edi+0x3d] & __dh;
																											__eflags =  *[fs:edi+0x3d];
																										} else {
																											 *0x6c61763e =  *0x6c61763e - __ebp;
																											__eflags =  *0x6c61763e;
																											L81:
																											if(__eflags <= 0) {
																												L100:
																												__al = __al |  *__eax;
																												__eflags = __al;
																												_push(__edx);
																												_push(__edi);
																												L101:
																												__esp = __esp - 1;
																												__eax = __eax & 0x64252070;
																												__eflags = __eax;
																												goto L102;
																											} else {
																												asm("insb");
																												__esp =  *(__eax + 0x3d) * 0x494c203d;
																												__eflags = __esp;
																												L83:
																												__esi = __esi + 1;
																												__eflags = __esi;
																												L84:
																												__ebp = __ebp + 1;
																												_pop(__edi);
																												_push(__edx);
																												_push(__edi);
																												__esp = __esp - 1;
																												__edi = __edi - 1;
																												__ebx = __ebx - 1;
																												 *__eax =  *__eax - __esp;
																												 *[es:eax] =  *[es:eax] & __ch;
																												__eflags =  *[es:eax];
																												L85:
																												 *[es:eax] =  *[es:eax] & __ch;
																												 *__eax =  *__eax - __ch;
																												__eflags =  *__eax;
																												if(__eflags < 0) {
																													__eax = __eax & 0x73252070;
																													__al = __al |  *__eax;
																													__eflags = __al;
																												} else {
																													asm("insb");
																													asm("outsd");
																													asm("arpl [ebx+0x5f], bp");
																													if(__eflags == 0) {
																														L95:
																														asm("popa");
																														__ebp =  *(__ebp + 0x64) * 0x2528203a;
																														__eflags = __ebp;
																														L96:
																														__eflags = __ah -  *[fs:eax];
																														 *0x202c2973 =  *0x202c2973 - __ah;
																														__eflags =  *0x202c2973;
																													} else {
																														__ch = __ch -  *__ecx;
																														__dh = __dh - __edx[0x1d];
																														asm("insb");
																														 *0x7375623e =  *0x7375623e - __ebp;
																														__eflags =  *0x7375623e;
																														asm("bound esi, [ds:ebp+0x73]");
																														if(__eflags >= 0) {
																															L98:
																															__eflags =  *(__ebp + 0x20) * 0x7325;
																															L99:
																															__al = __al - 0x20;
																															asm("insb");
																															__ebp =  *(__esi + 0x65) * 0xa642520;
																															__eflags = __ebp;
																															goto L100;
																														} else {
																															 *[ds:eax] =  *[ds:eax] & __dh;
																															 *__eax =  *__eax - __eax;
																															__eflags =  *__eax;
																															 *__eax = __al +  *__eax;
																															 *__eax = __al +  *__eax;
																															__ecx = __ecx + 1;
																															__eflags = __ecx;
																															L91:
																															if(__eflags >= 0) {
																																 *(__edi + 0x6e) =  *(__edi + 0x6e) & __ch;
																																asm("arpl [ebp+0x20], sp");
																																goto L114;
																															} else {
																																if (__eflags < 0) goto L114;
																																if(__eflags < 0) {
																																	L114:
																																	 *[gs:0x73692070] =  *[gs:0x73692070] & __ah;
																																	 *0xa64 =  *0xa64 & __ah;
																																	_t65 = __ebp + 0x72;
																																	 *_t65 = __al +  *(__ebp + 0x72);
																																	__eflags =  *_t65;
																																	if (__eflags < 0) goto L127;
																																	asm("outsd");
																																} else {
																																	__ebp =  *(__edi + 0x6e) * 0x69616620;
																																	__eflags = __ebp;
																																	goto L95;
																																}
																															}
																														}
																													}
																												}
																											}
																										}
																									} else {
																										__al = __al ^ 0x0000002d;
																										asm("insb");
																										__esp = __edx[0x1c] * 0x65697261;
																										__eflags = __esp;
																										goto L65;
																									}
																								}
																							}
																						}
																					} else {
																						L52:
																						 *__eax = __al +  *__eax;
																						 *__edi =  *__edi + __ch;
																						__eflags =  *__edi;
																						goto L53;
																					}
																				}
																			}
																		} else {
																			__esp =  *(__ebp + 0x72) * 0x2a20745f;
																			 *__edx =  *__edx - __ebp;
																			__eflags =  *__edx;
																			goto L26;
																		}
																	}
																}
															}
														}
													}
												}
											}
										} else {
											asm("bound esi, [ebp+0x69]");
											asm("insb");
											asm("das");
											asm("insd");
											__ebp =  *(__esi + 0x67) * 0x36772d77;
											__al = __al ^ 0x0000002d;
											 *(__ecx + 0x31) =  *(__ecx + 0x31) ^ __ah;
											__al = __al ^ 0x00000039;
											__eax = __eax ^ 0x64383734;
											__eflags =  *__edi - __ch;
											asm("insd");
											__ebp =  *(__esi + 0x67) * 0x36772d77;
											__al = __al ^ 0x0000002d;
											asm("insb");
											__esp = __edx[0x1c] * 0x65697261;
											__eflags = __esp;
											goto L15;
										}
									}
								}
							}
							__al = __al |  *__eax;
							__eflags = __al;
						} else {
							__eax =  *(__esi + 0x14);
							__eax = GetThreadPriority( *(__esi + 0x14));
							 *(__esi + 0x68) = 0;
							 *(__esi + 0x6c) = __eax;
							__eax =  *(__esi + 0x20) & 0x000000ff;
							__esp = __esp - 4;
							 *(__esi + 0x20) & 0xcf =  *(__esi + 0x20) & 0xcf | 0x00000010;
							 *(__esi + 0x20) = __al;
							__eax =  *0x6db2a020;
							__eax = TlsSetValue( *0x6db2a020, __esi);
							__esp = __esp - 8;
							__eflags = __eax;
							if(__eax == 0) {
								goto L7;
							} else {
								__esp = __esp + 0x2c;
								__ebx = __esi;
								__eax = __esi;
								_pop(__ebx);
								_pop(__esi);
								_pop(__edi);
								_pop(__ebp);
								return __esi;
							}
						}
					}
				}
			}

0x6db24b15
0x6db24b17
0x6db24b1c
0x6db24b1e
0x6db24afc
0x6db24b05
0x6db24b20
0x6db24b20
0x6db24b22
0x00000000
0x6db24b24
0x6db24b24
0x6db24b31
0x6db24b53
0x6db24b59
0x6db24b60
0x6db24b63
0x6db24b66
0x6db24b69
0x6db24b6e
0x6db24b74
0x6db24b7b
0x6db24b84
0x6db24b8c
0x6db24b8e
0x6db24b90
0x6db24b90
0x6db24bba
0x6db24bc0
0x6db24bc3
0x6db24bc5
0x6db295c5
0x6db295c5
0x6db295ca
0x6db295cf
0x6db295d1
0x6db295d5
0x6db295da
0x6db295dc
0x6db295e0
0x6db295e5
0x6db295e8
0x6db295ea
0x6db295ec
0x6db295ee
0x6db295f0
0x6db295f2
0x6db295f4
0x6db295f6
0x6db295f8
0x6db295fa
0x6db295fc
0x6db295fe
0x6db29600
0x6db29602
0x6db29604
0x6db29606
0x6db29608
0x6db2960a
0x6db2960c
0x6db2960e
0x6db29610
0x6db29612
0x6db29614
0x6db29616
0x6db29618
0x6db2961a
0x6db2961c
0x6db2961e
0x6db29620
0x6db29622
0x6db29624
0x6db29626
0x6db29628
0x6db2962a
0x6db2962c
0x6db2962e
0x6db29630
0x6db29632
0x6db29634
0x6db29636
0x6db29638
0x6db2963a
0x6db2963c
0x6db2963e
0x6db29640
0x6db29642
0x6db29644
0x6db29646
0x6db29648
0x6db2964a
0x6db2964c
0x6db2964e
0x6db29650
0x6db29652
0x6db29654
0x6db29656
0x6db29658
0x6db2965a
0x6db2965c
0x6db2965e
0x6db29660
0x6db29662
0x6db29664
0x6db29666
0x6db29668
0x6db2966a
0x6db2966c
0x6db2966e
0x6db29670
0x6db29672
0x6db29674
0x6db29676
0x6db29678
0x6db2967a
0x6db2967c
0x6db2967e
0x6db29680
0x6db29682
0x6db29684
0x6db29686
0x6db29688
0x6db2968a
0x6db2968c
0x6db2968e
0x6db29690
0x6db29692
0x6db29694
0x6db29696
0x6db29698
0x6db2969a
0x6db2969c
0x6db2969e
0x6db296a0
0x6db296a2
0x6db296a4
0x6db296a6
0x6db296a8
0x6db296aa
0x6db296ac
0x6db296ae
0x6db296b0
0x6db296b2
0x6db296b4
0x6db296b6
0x6db296b8
0x6db296ba
0x6db296bc
0x6db296be
0x6db296c0
0x6db296c2
0x6db296c4
0x6db296c6
0x6db296c8
0x6db296ca
0x6db296cc
0x6db296ce
0x6db296d0
0x6db296d2
0x6db296d4
0x6db296d6
0x6db296d8
0x6db296da
0x6db296dc
0x6db296de
0x6db296e0
0x6db296e2
0x6db296e4
0x6db296e6
0x6db296e8
0x6db296ea
0x6db296ec
0x6db296ee
0x6db296f0
0x6db296f2
0x6db296f4
0x6db296f6
0x6db296f8
0x6db296fa
0x6db296fc
0x6db296fe
0x6db29700
0x6db29702
0x6db29704
0x6db29706
0x6db29708
0x6db2970a
0x6db2970c
0x6db2970e
0x6db29710
0x6db29712
0x6db29714
0x6db29716
0x6db29718
0x6db2971a
0x6db2971c
0x6db2971e
0x6db29720
0x6db29722
0x6db29724
0x6db29726
0x6db29728
0x6db2972a
0x6db2972c
0x6db2972e
0x6db29730
0x6db29732
0x6db29734
0x6db29736
0x6db29738
0x6db2973a
0x6db2973c
0x6db2973e
0x6db29740
0x6db29742
0x6db29744
0x6db29746
0x6db29748
0x6db2974a
0x6db2974c
0x6db2974e
0x6db29750
0x6db29752
0x6db29754
0x6db29756
0x6db29758
0x6db2975a
0x6db2975c
0x6db2975e
0x6db29760
0x6db29762
0x6db29764
0x6db29766
0x6db29768
0x6db2976a
0x6db2976c
0x6db2976e
0x6db29770
0x6db29772
0x6db29774
0x6db29776
0x6db29778
0x6db2977a
0x6db2977c
0x6db2977e
0x6db29780
0x6db29782
0x6db29784
0x6db29786
0x6db29788
0x6db2978a
0x6db2978c
0x6db2978e
0x6db29790
0x6db29792
0x6db29794
0x6db29796
0x6db29798
0x6db2979a
0x6db2979c
0x6db2979e
0x6db297a0
0x6db297a2
0x6db297a4
0x6db297a6
0x6db297a8
0x6db297aa
0x6db297ac
0x6db297ae
0x6db297b0
0x6db297b2
0x6db297b4
0x6db297b6
0x6db297b8
0x6db297ba
0x6db297bc
0x6db297be
0x6db297c0
0x6db297c2
0x6db297c4
0x6db297c6
0x6db297c8
0x6db297ca
0x6db297cc
0x6db297ce
0x6db297d0
0x6db297d2
0x6db297d4
0x6db297d6
0x6db297d8
0x6db297da
0x6db297dc
0x6db297de
0x6db297e0
0x6db297e2
0x6db297e4
0x6db297e6
0x6db297e8
0x6db297ea
0x6db297ec
0x6db297ee
0x6db297f0
0x6db297f2
0x6db297f4
0x6db297f6
0x6db297f8
0x6db297fa
0x6db297fc
0x6db297fe
0x6db29800
0x6db29802
0x6db29804
0x6db29806
0x6db29808
0x6db2980a
0x6db2980c
0x6db2980e
0x6db29810
0x6db29812
0x6db29814
0x6db29816
0x6db29818
0x6db2981a
0x6db2981c
0x6db2981e
0x6db29820
0x6db29822
0x6db29824
0x6db29826
0x6db29828
0x6db2982a
0x6db2982c
0x6db2982e
0x6db29830
0x6db29832
0x6db29834
0x6db29836
0x6db29838
0x6db2983a
0x6db2983c
0x6db2983e
0x6db29840
0x6db29842
0x6db29844
0x6db29846
0x6db29848
0x6db2984a
0x6db2984c
0x6db2984e
0x6db29850
0x6db29852
0x6db29854
0x6db29856
0x6db29858
0x6db2985a
0x6db2985c
0x6db2985e
0x6db29860
0x6db29862
0x6db29864
0x6db29866
0x6db29868
0x6db2986a
0x6db2986c
0x6db2986e
0x6db29870
0x6db29872
0x6db29874
0x6db29876
0x6db29878
0x6db2987a
0x6db2987c
0x6db2987e
0x6db29880
0x6db29882
0x6db29884
0x6db29886
0x6db29888
0x6db2988a
0x6db2988c
0x6db2988e
0x6db29890
0x6db29892
0x6db29894
0x6db29896
0x6db29898
0x6db2989a
0x6db2989c
0x6db2989e
0x6db298a0
0x6db298a2
0x6db298a4
0x6db298a6
0x6db298a8
0x6db298aa
0x6db298ac
0x6db298ae
0x6db298b0
0x6db298b2
0x6db298b4
0x6db298b6
0x6db298b8
0x6db298ba
0x6db298bc
0x6db298be
0x6db298c0
0x6db298c2
0x6db298c4
0x6db298c6
0x6db298c8
0x6db298ca
0x6db298cc
0x6db298ce
0x6db298d0
0x6db298d2
0x6db298d4
0x6db298d6
0x6db298d8
0x6db298da
0x6db298dc
0x6db298de
0x6db298e0
0x6db298e2
0x6db298e4
0x6db298e6
0x6db298e8
0x6db298ea
0x6db298ec
0x6db298ee
0x6db298f0
0x6db298f2
0x6db298f4
0x6db298f6
0x6db298f8
0x6db298fa
0x6db298fc
0x6db298fe
0x6db29900
0x6db29902
0x6db29904
0x6db29906
0x6db29908
0x6db2990a
0x6db2990c
0x6db2990e
0x6db29910
0x6db29912
0x6db29914
0x6db29916
0x6db29918
0x6db2991a
0x6db2991c
0x6db2991e
0x6db29920
0x6db29922
0x6db29924
0x6db29926
0x6db29928
0x6db2992a
0x6db2992c
0x6db2992e
0x6db29930
0x6db29932
0x6db29934
0x6db29936
0x6db29938
0x6db2993a
0x6db2993c
0x6db2993e
0x6db29940
0x6db29942
0x6db29944
0x6db29946
0x6db29948
0x6db2994a
0x6db2994c
0x6db2994e
0x6db29950
0x6db29952
0x6db29954
0x6db29956
0x6db29958
0x6db2995a
0x6db2995c
0x6db2995e
0x6db29960
0x6db29962
0x6db29964
0x6db29966
0x6db29968
0x6db2996a
0x6db2996c
0x6db2996e
0x6db29970
0x6db29972
0x6db29974
0x6db29976
0x6db29978
0x6db2997a
0x6db2997c
0x6db2997e
0x6db29980
0x6db29982
0x6db29984
0x6db29986
0x6db29988
0x6db2998a
0x6db2998c
0x6db2998e
0x6db29990
0x6db29992
0x6db29994
0x6db29996
0x6db29998
0x6db2999a
0x6db2999c
0x6db2999e
0x6db299a0
0x6db299a2
0x6db299a4
0x6db299a6
0x6db299a8
0x6db299aa
0x6db299ac
0x6db299ae
0x6db299b0
0x6db299b2
0x6db299b4
0x6db299b6
0x6db299b8
0x6db299ba
0x6db299bc
0x6db299be
0x6db299c0
0x6db299c2
0x6db299c4
0x6db299c6
0x6db299c8
0x6db299ca
0x6db299cc
0x6db299ce
0x6db299d0
0x6db299d2
0x6db299d4
0x6db299d6
0x6db299d8
0x6db299da
0x6db299dc
0x6db299de
0x6db299e0
0x6db299e2
0x6db299e4
0x6db299e6
0x6db299e8
0x6db299ea
0x6db299ec
0x6db299ee
0x6db299f0
0x6db299f2
0x6db299f4
0x6db299f6
0x6db299f8
0x6db299fa
0x6db299fc
0x6db299fe
0x6db29a00
0x6db29a02
0x6db29a04
0x6db29a06
0x6db29a08
0x6db29a0a
0x6db29a0c
0x6db29a0e
0x6db29a10
0x6db29a12
0x6db29a14
0x6db29a16
0x6db29a18
0x6db29a1a
0x6db29a1c
0x6db29a1e
0x6db29a20
0x6db29a22
0x6db29a24
0x6db29a26
0x6db29a28
0x6db29a2a
0x6db29a2c
0x6db29a2e
0x6db29a30
0x6db29a32
0x6db29a34
0x6db29a36
0x6db29a38
0x6db29a3a
0x6db29a3c
0x6db29a3e
0x6db29a40
0x6db29a42
0x6db29a44
0x6db29a46
0x6db29a48
0x6db29a4a
0x6db29a4c
0x6db29a4e
0x6db29a50
0x6db29a52
0x6db29a54
0x6db29a56
0x6db29a58
0x6db29a5a
0x6db29a5c
0x6db29a5e
0x6db29a60
0x6db29a62
0x6db29a64
0x6db29a66
0x6db29a68
0x6db29a6a
0x6db29a6c
0x6db29a6e
0x6db29a70
0x6db29a72
0x6db29a74
0x6db29a76
0x6db29a78
0x6db29a7a
0x6db29a7c
0x6db29a7e
0x6db29a80
0x6db29a82
0x6db29a84
0x6db29a86
0x6db29a88
0x6db29a8a
0x6db29a8c
0x6db29a8e
0x6db29a90
0x6db29a92
0x6db29a94
0x6db29a96
0x6db29a98
0x6db29a9a
0x6db29a9c
0x6db29a9e
0x6db29aa0
0x6db29aa2
0x6db29aa4
0x6db29aa6
0x6db29aa8
0x6db29aaa
0x6db29aac
0x6db29aae
0x6db29ab0
0x6db29ab2
0x6db29ab4
0x6db29ab6
0x6db29ab8
0x6db29aba
0x6db29abc
0x6db29abe
0x6db29ac0
0x6db29ac2
0x6db29ac4
0x6db29ac6
0x6db29ac8
0x6db29aca
0x6db29acc
0x6db29ace
0x6db29ad0
0x6db29ad2
0x6db29ad4
0x6db29ad6
0x6db29ad8
0x6db29ada
0x6db29adc
0x6db29ade
0x6db29ae0
0x6db29ae2
0x6db29ae4
0x6db29ae6
0x6db29ae8
0x6db29aea
0x6db29aec
0x6db29aee
0x6db29af0
0x6db29af2
0x6db29af4
0x6db29af6
0x6db29af8
0x6db29afa
0x6db29afc
0x6db29afe
0x6db29b00
0x6db29b02
0x6db29b04
0x6db29b06
0x6db29b08
0x6db29b0a
0x6db29b0c
0x6db29b0e
0x6db29b10
0x6db29b12
0x6db29b14
0x6db29b16
0x6db29b18
0x6db29b1a
0x6db29b1c
0x6db29b1e
0x6db29b20
0x6db29b22
0x6db29b24
0x6db29b26
0x6db29b28
0x6db29b2a
0x6db29b2c
0x6db29b2e
0x6db29b30
0x6db29b32
0x6db29b34
0x6db29b36
0x6db29b38
0x6db29b3a
0x6db29b3c
0x6db29b3e
0x6db29b40
0x6db29b42
0x6db29b44
0x6db29b46
0x6db29b48
0x6db29b4a
0x6db29b4c
0x6db29b4e
0x6db29b50
0x6db29b52
0x6db29b54
0x6db29b56
0x6db29b58
0x6db29b5a
0x6db29b5c
0x6db29b5e
0x6db29b60
0x6db29b62
0x6db29b64
0x6db29b66
0x6db29b68
0x6db29b6a
0x6db29b6c
0x6db29b6e
0x6db29b70
0x6db29b72
0x6db29b74
0x6db29b76
0x6db29b78
0x6db29b7a
0x6db29b7c
0x6db29b7e
0x6db29b80
0x6db29b82
0x6db29b84
0x6db29b86
0x6db29b88
0x6db29b8a
0x6db29b8c
0x6db29b8e
0x6db29b90
0x6db29b92
0x6db29b94
0x6db29b96
0x6db29b98
0x6db29b9a
0x6db29b9c
0x6db29b9e
0x6db29ba0
0x6db29ba2
0x6db29ba4
0x6db29ba6
0x6db29ba8
0x6db29baa
0x6db29bac
0x6db29bae
0x6db29bb0
0x6db29bb2
0x6db29bb4
0x6db29bb6
0x6db29bb8
0x6db29bba
0x6db29bbc
0x6db29bbe
0x6db29bc0
0x6db29bc2
0x6db29bc4
0x6db29bc6
0x6db29bc8
0x6db29bca
0x6db29bcc
0x6db29bce
0x6db29bd0
0x6db29bd2
0x6db29bd4
0x6db29bd6
0x6db29bd8
0x6db29bda
0x6db29bdc
0x6db29bde
0x6db29be0
0x6db29be2
0x6db29be4
0x6db29be6
0x6db29be8
0x6db29bea
0x6db29bec
0x6db29bee
0x6db29bf0
0x6db29bf2
0x6db29bf4
0x6db29bf6
0x6db29bf8
0x6db29bfa
0x6db29bfc
0x6db29bfe
0x6db29c00
0x6db29c02
0x6db29c04
0x6db29c06
0x6db29c08
0x6db29c0a
0x6db29c0c
0x6db29c0e
0x6db29c10
0x6db29c12
0x6db29c14
0x6db29c16
0x6db29c18
0x6db29c1a
0x6db29c1c
0x6db29c1e
0x6db29c20
0x6db29c22
0x6db29c24
0x6db29c26
0x6db29c28
0x6db29c2a
0x6db29c2c
0x6db29c2e
0x6db29c30
0x6db29c32
0x6db29c34
0x6db29c36
0x6db29c38
0x6db29c3a
0x6db29c3c
0x6db29c3e
0x6db29c40
0x6db29c42
0x6db29c44
0x6db29c46
0x6db29c48
0x6db29c4a
0x6db29c4c
0x6db29c4e
0x6db29c50
0x6db29c52
0x6db29c54
0x6db29c56
0x6db29c58
0x6db29c5a
0x6db29c5c
0x6db29c5e
0x6db29c60
0x6db29c62
0x6db29c64
0x6db29c66
0x6db29c68
0x6db29c6a
0x6db29c6c
0x6db29c6e
0x6db29c70
0x6db29c72
0x6db29c74
0x6db29c76
0x6db29c78
0x6db29c7a
0x6db29c7c
0x6db29c7e
0x6db29c80
0x6db29c82
0x6db29c84
0x6db29c86
0x6db29c88
0x6db29c8a
0x6db29c8c
0x6db29c8e
0x6db29c90
0x6db29c92
0x6db29c94
0x6db29c96
0x6db29c98
0x6db29c9a
0x6db29c9c
0x6db29c9e
0x6db29ca0
0x6db29ca2
0x6db29ca4
0x6db29ca6
0x6db29ca8
0x6db29caa
0x6db29cac
0x6db29cae
0x6db29cb0
0x6db29cb2
0x6db29cb4
0x6db29cb6
0x6db29cb8
0x6db29cba
0x6db29cbc
0x6db29cbe
0x6db29cc0
0x6db29cc2
0x6db29cc4
0x6db29cc6
0x6db29cc8
0x6db29cca
0x6db29ccc
0x6db29cce
0x6db29cd0
0x6db29cd2
0x6db29cd4
0x6db29cd6
0x6db29cd8
0x6db29cda
0x6db29cdc
0x6db29cde
0x6db29ce0
0x6db29ce2
0x6db29ce4
0x6db29ce6
0x6db29ce8
0x6db29cea
0x6db29cec
0x6db29cee
0x6db29cf0
0x6db29cf2
0x6db29cf4
0x6db29cf6
0x6db29cf8
0x6db29cfa
0x6db29cfc
0x6db29cfe
0x6db29d00
0x6db29d02
0x6db29d04
0x6db29d06
0x6db29d08
0x6db29d0a
0x6db29d0c
0x6db29d0e
0x6db29d10
0x6db29d12
0x6db29d14
0x6db29d16
0x6db29d18
0x6db29d1a
0x6db29d1c
0x6db29d1e
0x6db29d20
0x6db29d22
0x6db29d24
0x6db29d26
0x6db29d28
0x6db29d2a
0x6db29d2c
0x6db29d2e
0x6db29d30
0x6db29d32
0x6db29d34
0x6db29d36
0x6db29d38
0x6db29d3a
0x6db29d3c
0x6db29d3e
0x6db29d40
0x6db29d42
0x6db29d44
0x6db29d46
0x6db29d48
0x6db29d4a
0x6db29d4c
0x6db29d4e
0x6db29d50
0x6db29d52
0x6db29d54
0x6db29d56
0x6db29d58
0x6db29d5a
0x6db29d5c
0x6db29d5e
0x6db29d60
0x6db29d62
0x6db29d64
0x6db29d66
0x6db29d68
0x6db29d6a
0x6db29d6c
0x6db29d6e
0x6db29d70
0x6db29d72
0x6db29d74
0x6db29d76
0x6db29d78
0x6db29d7a
0x6db29d7c
0x6db29d7e
0x6db29d80
0x6db29d82
0x6db29d84
0x6db29d86
0x6db29d88
0x6db29d8a
0x6db29d8c
0x6db29d8e
0x6db29d90
0x6db29d92
0x6db29d94
0x6db29d96
0x6db29d98
0x6db29d9a
0x6db29d9c
0x6db29d9e
0x6db29da0
0x6db29da2
0x6db29da4
0x6db29da6
0x6db29da8
0x6db29daa
0x6db29dac
0x6db29dae
0x6db29db0
0x6db29db2
0x6db29db4
0x6db29db6
0x6db29db8
0x6db29dba
0x6db29dbc
0x6db29dbe
0x6db29dc0
0x6db29dc2
0x6db29dc4
0x6db29dc6
0x6db29dc8
0x6db29dca
0x6db29dcc
0x6db29dce
0x6db29dd0
0x6db29dd2
0x6db29dd4
0x6db29dd6
0x6db29dd8
0x6db29dda
0x6db29ddc
0x6db29dde
0x6db29de0
0x6db29de2
0x6db29de4
0x6db29de6
0x6db29de8
0x6db29dea
0x6db29dec
0x6db29dee
0x6db29df0
0x6db29df2
0x6db29df4
0x6db29df6
0x6db29df8
0x6db29dfa
0x6db29dfc
0x6db29dfe
0x6db29e00
0x6db29e02
0x6db29e04
0x6db29e06
0x6db29e08
0x6db29e0a
0x6db29e0c
0x6db29e0e
0x6db29e10
0x6db29e12
0x6db29e14
0x6db29e16
0x6db29e18
0x6db29e1a
0x6db29e1c
0x6db29e1e
0x6db29e20
0x6db29e22
0x6db29e24
0x6db29e26
0x6db29e28
0x6db29e2a
0x6db29e2c
0x6db29e2e
0x6db29e30
0x6db29e32
0x6db29e34
0x6db29e36
0x6db29e38
0x6db29e3a
0x6db29e3c
0x6db29e3e
0x6db29e40
0x6db29e42
0x6db29e44
0x6db29e46
0x6db29e48
0x6db29e4a
0x6db29e4c
0x6db29e4e
0x6db29e50
0x6db29e52
0x6db29e54
0x6db29e56
0x6db29e58
0x6db29e5a
0x6db29e5c
0x6db29e5e
0x6db29e60
0x6db29e62
0x6db29e64
0x6db29e66
0x6db29e68
0x6db29e6a
0x6db29e6c
0x6db29e6e
0x6db29e70
0x6db29e72
0x6db29e74
0x6db29e76
0x6db29e78
0x6db29e7a
0x6db29e7c
0x6db29e7e
0x6db29e80
0x6db29e82
0x6db29e84
0x6db29e86
0x6db29e88
0x6db29e8a
0x6db29e8c
0x6db29e8e
0x6db29e90
0x6db29e92
0x6db29e94
0x6db29e96
0x6db29e98
0x6db29e9a
0x6db29e9c
0x6db29e9e
0x6db29ea0
0x6db29ea2
0x6db29ea4
0x6db29ea6
0x6db29ea8
0x6db29eaa
0x6db29eac
0x6db29eae
0x6db29eb0
0x6db29eb2
0x6db29eb4
0x6db29eb6
0x6db29eb8
0x6db29eba
0x6db29ebc
0x6db29ebe
0x6db29ec0
0x6db29ec2
0x6db29ec4
0x6db29ec6
0x6db29ec8
0x6db29eca
0x6db29ecc
0x6db29ece
0x6db29ed0
0x6db29ed2
0x6db29ed4
0x6db29ed6
0x6db29ed8
0x6db29eda
0x6db29edc
0x6db29ede
0x6db29ee0
0x6db29ee2
0x6db29ee4
0x6db29ee6
0x6db29ee8
0x6db29eea
0x6db29eec
0x6db29eee
0x6db29ef0
0x6db29ef2
0x6db29ef4
0x6db29ef6
0x6db29ef8
0x6db29efa
0x6db29efc
0x6db29efe
0x6db29f00
0x6db29f02
0x6db29f04
0x6db29f06
0x6db29f08
0x6db29f0a
0x6db29f0c
0x6db29f0e
0x6db29f10
0x6db29f12
0x6db29f14
0x6db29f16
0x6db29f18
0x6db29f1a
0x6db29f1c
0x6db29f1e
0x6db29f20
0x6db29f22
0x6db29f24
0x6db29f26
0x6db29f28
0x6db29f2a
0x6db29f2c
0x6db29f2e
0x6db29f30
0x6db29f32
0x6db29f34
0x6db29f36
0x6db29f38
0x6db29f3a
0x6db29f3c
0x6db29f3e
0x6db29f40
0x6db29f42
0x6db29f44
0x6db29f46
0x6db29f48
0x6db29f4a
0x6db29f4c
0x6db29f4e
0x6db29f50
0x6db29f52
0x6db29f54
0x6db29f56
0x6db29f58
0x6db29f5a
0x6db29f5c
0x6db29f5e
0x6db29f60
0x6db29f62
0x6db29f64
0x6db29f66
0x6db29f68
0x6db29f6a
0x6db29f6c
0x6db29f6e
0x6db29f70
0x6db29f72
0x6db29f74
0x6db29f76
0x6db29f78
0x6db29f7a
0x6db29f7c
0x6db29f7e
0x6db29f80
0x6db29f82
0x6db29f84
0x6db29f86
0x6db29f88
0x6db29f8a
0x6db29f8c
0x6db29f8e
0x6db29f90
0x6db29f92
0x6db29f94
0x6db29f96
0x6db29f98
0x6db29f9a
0x6db29f9c
0x6db29f9e
0x6db29fa0
0x6db29fa2
0x6db29fa4
0x6db29fa6
0x6db29fa8
0x6db29faa
0x6db29fac
0x6db29fae
0x6db29fb0
0x6db29fb2
0x6db29fb4
0x6db29fb6
0x6db29fb8
0x6db29fba
0x6db29fbc
0x6db29fbe
0x6db29fc0
0x6db29fc2
0x6db29fc4
0x6db29fc6
0x6db29fc8
0x6db29fca
0x6db29fcc
0x6db29fce
0x6db29fd0
0x6db29fd2
0x6db29fd4
0x6db29fd6
0x6db29fd8
0x6db29fda
0x6db29fdc
0x6db29fde
0x6db29fe0
0x6db29fe2
0x6db29fe4
0x6db29fe6
0x6db29fe8
0x6db29fea
0x6db29fec
0x6db29fee
0x6db29ff0
0x6db29ff2
0x6db29ff4
0x6db29ff6
0x6db29ff8
0x6db29ffa
0x6db29ffc
0x6db29ffe
0x6db2a000
0x6db2a002
0x6db2a004
0x6db2a006
0x6db2a008
0x6db2a00a
0x6db2a00c
0x6db2a00e
0x6db2a010
0x6db2a012
0x6db2a014
0x6db2a016
0x6db2a018
0x6db2a01a
0x6db2a01c
0x6db2a01e
0x6db2a020
0x6db2a022
0x6db2a024
0x6db2a026
0x6db2a028
0x6db2a02a
0x6db2a02c
0x6db2a02e
0x6db2a030
0x6db2a032
0x6db2a034
0x6db2a036
0x6db2a038
0x6db2a03a
0x6db2a03c
0x6db2a03e
0x6db2a040
0x6db2a042
0x6db2a044
0x6db2a046
0x6db2a048
0x6db2a04a
0x6db2a04c
0x6db2a04e
0x6db2a050
0x6db2a052
0x6db2a054
0x6db2a056
0x6db2a058
0x6db2a05a
0x6db2a05c
0x6db2a05e
0x6db2a060
0x6db2a062
0x6db2a064
0x6db2a066
0x6db2a068
0x6db2a06a
0x6db2a06c
0x6db2a06e
0x6db2a070
0x6db2a072
0x6db2a074
0x6db2a076
0x6db2a078
0x6db2a07a
0x6db2a07c
0x6db2a07e
0x6db2a080
0x6db2a082
0x6db2a084
0x6db2a086
0x6db2a088
0x6db2a08a
0x6db2a08c
0x6db2a08e
0x6db2a090
0x6db2a092
0x6db2a094
0x6db2a096
0x6db2a098
0x6db2a09a
0x6db2a09c
0x6db2a09e
0x6db2a0a0
0x6db2a0a2
0x6db2a0a4
0x6db2a0a6
0x6db2a0a8
0x6db2a0aa
0x6db2a0ac
0x6db2a0ae
0x6db2a0b0
0x6db2a0b2
0x6db2a0b4
0x6db2a0b6
0x6db2a0b8
0x6db2a0ba
0x6db2a0bc
0x6db2a0be
0x6db2a0c0
0x6db2a0c2
0x6db2a0c4
0x6db2a0c6
0x6db2a0c8
0x6db2a0ca
0x6db2a0cc
0x6db2a0ce
0x6db2a0d0
0x6db2a0d2
0x6db2a0d4
0x6db2a0d6
0x6db2a0d8
0x6db2a0da
0x6db2a0dc
0x6db2a0de
0x6db2a0e0
0x6db2a0e2
0x6db2a0e4
0x6db2a0e6
0x6db2a0e8
0x6db2a0ea
0x6db2a0ec
0x6db2a0ee
0x6db2a0f0
0x6db2a0f2
0x6db2a0f4
0x6db2a0f6
0x6db2a0f8
0x6db2a0fa
0x6db2a0fc
0x6db2a0fe
0x6db2a100
0x6db2a102
0x6db2a104
0x6db2a106
0x6db2a108
0x6db2a10a
0x6db2a10c
0x6db2a10e
0x6db2a110
0x6db2a112
0x6db2a114
0x6db2a116
0x6db2a118
0x6db2a11a
0x6db2a11c
0x6db2a11e
0x6db2a120
0x6db2a122
0x6db2a124
0x6db2a126
0x6db2a128
0x6db2a12a
0x6db2a12c
0x6db2a12e
0x6db2a130
0x6db2a132
0x6db2a134
0x6db2a136
0x6db2a138
0x6db2a13a
0x6db2a13c
0x6db2a13e
0x6db2a140
0x6db2a142
0x6db2a144
0x6db2a146
0x6db2a148
0x6db2a14a
0x6db2a14c
0x6db2a14e
0x6db2a150
0x6db2a152
0x6db2a154
0x6db2a156
0x6db2a158
0x6db2a15a
0x6db2a15c
0x6db2a15e
0x6db2a160
0x6db2a162
0x6db2a164
0x6db2a166
0x6db2a168
0x6db2a16a
0x6db2a16c
0x6db2a16e
0x6db2a170
0x6db2a172
0x6db2a174
0x6db2a176
0x6db2a178
0x6db2a17a
0x6db2a17c
0x6db2a17e
0x6db2a180
0x6db2a182
0x6db2a184
0x6db2a186
0x6db2a188
0x6db2a18a
0x6db2a18c
0x6db2a18e
0x6db2a190
0x6db2a192
0x6db2a194
0x6db2a196
0x6db2a198
0x6db2a19a
0x6db2a19c
0x6db2a19e
0x6db2a1a0
0x6db2a1a2
0x6db2a1a4
0x6db2a1a6
0x6db2a1a8
0x6db2a1aa
0x6db2a1ac
0x6db2a1ae
0x6db2a1b0
0x6db2a1b2
0x6db2a1b4
0x6db2a1b6
0x6db2a1b8
0x6db2a1ba
0x6db2a1bc
0x6db2a1be
0x6db2a1c0
0x6db2a1c2
0x6db2a1c4
0x6db2a1c6
0x6db2a1c8
0x6db2a1ca
0x6db2a1cc
0x6db2a1ce
0x6db2a1d0
0x6db2a1d2
0x6db2a1d4
0x6db2a1d6
0x6db2a1d8
0x6db2a1da
0x6db2a1dc
0x6db2a1de
0x6db2a1e0
0x6db2a1e2
0x6db2a1e4
0x6db2a1e6
0x6db2a1e8
0x6db2a1ea
0x6db2a1ec
0x6db2a1ee
0x6db2a1f0
0x6db2a1f2
0x6db2a1f4
0x6db2a1f6
0x6db2a1f8
0x6db2a1fa
0x6db2a1fc
0x6db2a1fe
0x6db2a200
0x6db2a202
0x6db2a204
0x6db2a206
0x6db2a208
0x6db2a20a
0x6db2a20c
0x6db2a20e
0x6db2a210
0x6db2a212
0x6db2a214
0x6db2a216
0x6db2a218
0x6db2a21a
0x6db2a21c
0x6db2a21e
0x6db2a220
0x6db2a222
0x6db2a224
0x6db2a226
0x6db2a228
0x6db2a22a
0x6db2a22c
0x6db2a22e
0x6db2a230
0x6db2a232
0x6db2a234
0x6db2a236
0x6db2a238
0x6db2a23a
0x6db2a23c
0x6db2a23e
0x6db2a240
0x6db2a242
0x6db2a244
0x6db2a246
0x6db2a248
0x6db2a24a
0x6db2a24c
0x6db2a24e
0x6db2a250
0x6db2a252
0x6db2a254
0x6db2a256
0x6db2a258
0x6db2a25a
0x6db2a25c
0x6db2a25e
0x6db2a260
0x6db2a262
0x6db2a264
0x6db2a266
0x6db2a268
0x6db2a26a
0x6db2a26c
0x6db2a26e
0x6db2a270
0x6db2a272
0x6db2a274
0x6db2a276
0x6db2a278
0x6db2a27a
0x6db2a27c
0x6db2a27e
0x6db2a280
0x6db2a282
0x6db2a284
0x6db2a286
0x6db2a288
0x6db2a28a
0x6db2a28c
0x6db2a28e
0x6db2a290
0x6db2a292
0x6db2a294
0x6db2a296
0x6db2a298
0x6db2a29a
0x6db2a29c
0x6db2a29e
0x6db2a2a0
0x6db2a2a2
0x6db2a2a4
0x6db2a2a6
0x6db2a2a8
0x6db2a2aa
0x6db2a2ac
0x6db2a2ae
0x6db2a2b0
0x6db2a2b2
0x6db2a2b4
0x6db2a2b6
0x6db2a2b8
0x6db2a2ba
0x6db2a2bc
0x6db2a2be
0x6db2a2c0
0x6db2a2c2
0x6db2a2c4
0x6db2a2c6
0x6db2a2c8
0x6db2a2ca
0x6db2a2cc
0x6db2a2ce
0x6db2a2d0
0x6db2a2d2
0x6db2a2d4
0x6db2a2d6
0x6db2a2d8
0x6db2a2da
0x6db2a2dc
0x6db2a2de
0x6db2a2e0
0x6db2a2e2
0x6db2a2e4
0x6db2a2e6
0x6db2a2e8
0x6db2a2ea
0x6db2a2ec
0x6db2a2ee
0x6db2a2f0
0x6db2a2f2
0x6db2a2f4
0x6db2a2f6
0x6db2a2f8
0x6db2a2fa
0x6db2a2fc
0x6db2a2fe
0x6db2a300
0x6db2a302
0x6db2a304
0x6db2a306
0x6db2a308
0x6db2a30a
0x6db2a30c
0x6db2a30e
0x6db2a310
0x6db2a312
0x6db2a314
0x6db2a316
0x6db2a318
0x6db2a31a
0x6db2a31c
0x6db2a31e
0x6db2a320
0x6db2a322
0x6db2a324
0x6db2a326
0x6db2a328
0x6db2a32a
0x6db2a32c
0x6db2a32e
0x6db2a330
0x6db2a332
0x6db2a334
0x6db2a336
0x6db2a338
0x6db2a33a
0x6db2a33c
0x6db2a33e
0x6db2a340
0x6db2a342
0x6db2a344
0x6db2a346
0x6db2a348
0x6db2a34a
0x6db2a34c
0x6db2a34e
0x6db2a350
0x6db2a352
0x6db2a354
0x6db2a356
0x6db2a358
0x6db2a35a
0x6db2a35c
0x6db2a35e
0x6db2a360
0x6db2a362
0x6db2a364
0x6db2a366
0x6db2a368
0x6db2a36a
0x6db2a36c
0x6db2a36e
0x6db2a370
0x6db2a372
0x6db2a374
0x6db2a376
0x6db2a378
0x6db2a37a
0x6db2a37c
0x6db2a37e
0x6db2a380
0x6db2a382
0x6db2a384
0x6db2a386
0x6db2a388
0x6db2a38a
0x6db2a38c
0x6db2a38e
0x6db2a390
0x6db2a392
0x6db2a394
0x6db2a396
0x6db2a398
0x6db2a39a
0x6db2a39c
0x6db2a39e
0x6db2a3a0
0x6db2a3a2
0x6db2a3a4
0x6db2a3a6
0x6db2a3a8
0x6db2a3aa
0x6db2a3ac
0x6db2a3ae
0x6db2a3b0
0x6db2a3b2
0x6db2a3b4
0x6db2a3b6
0x6db2a3b8
0x6db2a3ba
0x6db2a3bc
0x6db2a3be
0x6db2a3c0
0x6db2a3c2
0x6db2a3c4
0x6db2a3c6
0x6db2a3c8
0x6db2a3ca
0x6db2a3cc
0x6db2a3ce
0x6db2a3d0
0x6db2a3d2
0x6db2a3d4
0x6db2a3d6
0x6db2a3d8
0x6db2a3da
0x6db2a3dc
0x6db2a3de
0x6db2a3e0
0x6db2a3e2
0x6db2a3e4
0x6db2a3e6
0x6db2a3e8
0x6db2a3ea
0x6db2a3ec
0x6db2a3ee
0x6db2a3f0
0x6db2a3f2
0x6db2a3f4
0x6db2a3f6
0x6db2a3f8
0x6db2a3fa
0x6db2a3fc
0x6db2a3fe
0x6db2a400
0x6db2a402
0x6db2a404
0x6db2a406
0x6db2a408
0x6db2a40a
0x6db2a40c
0x6db2a40e
0x6db2a410
0x6db2a412
0x6db2a414
0x6db2a416
0x6db2a418
0x6db2a41a
0x6db2a41c
0x6db2a41e
0x6db2a420
0x6db2a422
0x6db2a424
0x6db2a426
0x6db2a428
0x6db2a42a
0x6db2a42c
0x6db2a42e
0x6db2a430
0x6db2a432
0x6db2a434
0x6db2a436
0x6db2a438
0x6db2a43a
0x6db2a43c
0x6db2a43e
0x6db2a440
0x6db2a442
0x6db2a444
0x6db2a446
0x6db2a448
0x6db2a44a
0x6db2a44c
0x6db2a44e
0x6db2a450
0x6db2a452
0x6db2a454
0x6db2a456
0x6db2a458
0x6db2a45a
0x6db2a45c
0x6db2a45e
0x6db2a460
0x6db2a462
0x6db2a464
0x6db2a466
0x6db2a468
0x6db2a46a
0x6db2a46c
0x6db2a46e
0x6db2a470
0x6db2a472
0x6db2a474
0x6db2a476
0x6db2a478
0x6db2a47a
0x6db2a47c
0x6db2a47e
0x6db2a480
0x6db2a482
0x6db2a484
0x6db2a486
0x6db2a488
0x6db2a48a
0x6db2a48c
0x6db2a48e
0x6db2a490
0x6db2a492
0x6db2a494
0x6db2a496
0x6db2a498
0x6db2a49a
0x6db2a49c
0x6db2a49e
0x6db2a4a0
0x6db2a4a2
0x6db2a4a4
0x6db2a4a6
0x6db2a4a8
0x6db2a4aa
0x6db2a4ac
0x6db2a4ae
0x6db2a4b0
0x6db2a4b2
0x6db2a4b4
0x6db2a4b6
0x6db2a4b8
0x6db2a4ba
0x6db2a4bc
0x6db2a4be
0x6db2a4c0
0x6db2a4c2
0x6db2a4c4
0x6db2a4c6
0x6db2a4c8
0x6db2a4ca
0x6db2a4cc
0x6db2a4ce
0x6db2a4d0
0x6db2a4d2
0x6db2a4d4
0x6db2a4d6
0x6db2a4d8
0x6db2a4da
0x6db2a4dc
0x6db2a4de
0x6db2a4e0
0x6db2a4e2
0x6db2a4e4
0x6db2a4e6
0x6db2a4e8
0x6db2a4ea
0x6db2a4ec
0x6db2a4ee
0x6db2a4f0
0x6db2a4f2
0x6db2a4f4
0x6db2a4f6
0x6db2a4f8
0x6db2a4fa
0x6db2a4fc
0x6db2a4fe
0x6db2a500
0x6db2a502
0x6db2a504
0x6db2a506
0x6db2a508
0x6db2a50a
0x6db2a50c
0x6db2a50e
0x6db2a510
0x6db2a512
0x6db2a514
0x6db2a516
0x6db2a518
0x6db2a51a
0x6db2a51c
0x6db2a51e
0x6db2a520
0x6db2a522
0x6db2a524
0x6db2a526
0x6db2a528
0x6db2a52a
0x6db2a52c
0x6db2a52e
0x6db2a530
0x6db2a532
0x6db2a534
0x6db2a536
0x6db2a538
0x6db2a53a
0x6db2a53c
0x6db2a53e
0x6db2a540
0x6db2a542
0x6db2a544
0x6db2a546
0x6db2a548
0x6db2a54a
0x6db2a54c
0x6db2a54e
0x6db2a550
0x6db2a552
0x6db2a554
0x6db2a556
0x6db2a558
0x6db2a55a
0x6db2a55c
0x6db2a55e
0x6db2a560
0x6db2a562
0x6db2a564
0x6db2a566
0x6db2a568
0x6db2a56a
0x6db2a56c
0x6db2a56e
0x6db2a570
0x6db2a572
0x6db2a574
0x6db2a576
0x6db2a578
0x6db2a57a
0x6db2a57c
0x6db2a57e
0x6db2a580
0x6db2a582
0x6db2a584
0x6db2a586
0x6db2a588
0x6db2a58a
0x6db2a58c
0x6db2a58e
0x6db2a590
0x6db2a592
0x6db2a594
0x6db2a596
0x6db2a598
0x6db2a59a
0x6db2a59c
0x6db2a59e
0x6db2a5a0
0x6db2a5a2
0x6db2a5a4
0x6db2a5a6
0x6db2a5a8
0x6db2a5aa
0x6db2a5ac
0x6db2a5ae
0x6db2a5b0
0x6db2a5b2
0x6db2a5b4
0x6db2a5b6
0x6db2a5b8
0x6db2a5ba
0x6db2a5bc
0x6db2a5be
0x6db2a5c0
0x6db2a5c2
0x6db2a5c4
0x6db2a5c6
0x6db2a5c8
0x6db2a5ca
0x6db2a5cc
0x6db2a5ce
0x6db2a5d0
0x6db2a5d2
0x6db2a5d4
0x6db2a5d6
0x6db2a5d8
0x6db2a5da
0x6db2a5dc
0x6db2a5de
0x6db2a5e0
0x6db2a5e2
0x6db2a5e4
0x6db2a5e6
0x6db2a5e8
0x6db2a5ea
0x6db2a5ec
0x6db2a5ee
0x6db2a5f0
0x6db2a5f2
0x6db2a5f4
0x6db2a5f6
0x6db2a5f8
0x6db2a5fa
0x6db2a5fc
0x6db2a5fe
0x6db2a600
0x6db2a602
0x6db2a604
0x6db2a606
0x6db2a608
0x6db2a60a
0x6db2a60c
0x6db2a60e
0x6db2a610
0x6db2a612
0x6db2a614
0x6db2a616
0x6db2a618
0x6db2a61a
0x6db2a61c
0x6db2a61e
0x6db2a620
0x6db2a622
0x6db2a624
0x6db2a626
0x6db2a628
0x6db2a62a
0x6db2a62c
0x6db2a62e
0x6db2a630
0x6db2a632
0x6db2a634
0x6db2a636
0x6db2a638
0x6db2a63a
0x6db2a63c
0x6db2a63e
0x6db2a640
0x6db2a642
0x6db2a644
0x6db2a646
0x6db2a648
0x6db2a64a
0x6db2a64c
0x6db2a64e
0x6db2a650
0x6db2a652
0x6db2a654
0x6db2a656
0x6db2a658
0x6db2a65a
0x6db2a65c
0x6db2a65e
0x6db2a660
0x6db2a662
0x6db2a664
0x6db2a666
0x6db2a668
0x6db2a66a
0x6db2a66c
0x6db2a66e
0x6db2a670
0x6db2a672
0x6db2a674
0x6db2a676
0x6db2a678
0x6db2a67a
0x6db2a67c
0x6db2a67e
0x6db2a680
0x6db2a682
0x6db2a684
0x6db2a686
0x6db2a688
0x6db2a68a
0x6db2a68c
0x6db2a68e
0x6db2a690
0x6db2a692
0x6db2a694
0x6db2a696
0x6db2a698
0x6db2a69a
0x6db2a69c
0x6db2a69e
0x6db2a6a0
0x6db2a6a2
0x6db2a6a4
0x6db2a6a6
0x6db2a6a8
0x6db2a6aa
0x6db2a6ac
0x6db2a6ae
0x6db2a6b0
0x6db2a6b2
0x6db2a6b4
0x6db2a6b6
0x6db2a6b8
0x6db2a6ba
0x6db2a6bc
0x6db2a6be
0x6db2a6c0
0x6db2a6c2
0x6db2a6c4
0x6db2a6c6
0x6db2a6c8
0x6db2a6ca
0x6db2a6cc
0x6db2a6ce
0x6db2a6d0
0x6db2a6d2
0x6db2a6d4
0x6db2a6d6
0x6db2a6d8
0x6db2a6da
0x6db2a6dc
0x6db2a6de
0x6db2a6e0
0x6db2a6e2
0x6db2a6e4
0x6db2a6e6
0x6db2a6e8
0x6db2a6ea
0x6db2a6ec
0x6db2a6ee
0x6db2a6f0
0x6db2a6f2
0x6db2a6f4
0x6db2a6f6
0x6db2a6f8
0x6db2a6fa
0x6db2a6fc
0x6db2a6fe
0x6db2a700
0x6db2a702
0x6db2a704
0x6db2a706
0x6db2a708
0x6db2a70a
0x6db2a70c
0x6db2a70e
0x6db2a710
0x6db2a712
0x6db2a714
0x6db2a716
0x6db2a718
0x6db2a71a
0x6db2a71c
0x6db2a71e
0x6db2a720
0x6db2a722
0x6db2a724
0x6db2a726
0x6db2a728
0x6db2a72a
0x6db2a72c
0x6db2a72e
0x6db2a730
0x6db2a732
0x6db2a734
0x6db2a736
0x6db2a738
0x6db2a73a
0x6db2a73c
0x6db2a73e
0x6db2a740
0x6db2a742
0x6db2a744
0x6db2a746
0x6db2a748
0x6db2a74a
0x6db2a74c
0x6db2a74e
0x6db2a750
0x6db2a752
0x6db2a754
0x6db2a756
0x6db2a758
0x6db2a75a
0x6db2a75c
0x6db2a75e
0x6db2a760
0x6db2a762
0x6db2a764
0x6db2a766
0x6db2a768
0x6db2a76a
0x6db2a76c
0x6db2a76e
0x6db2a770
0x6db2a772
0x6db2a774
0x6db2a776
0x6db2a778
0x6db2a77a
0x6db2a77c
0x6db2a77e
0x6db2a780
0x6db2a782
0x6db2a784
0x6db2a786
0x6db2a788
0x6db2a78a
0x6db2a78c
0x6db2a78e
0x6db2a790
0x6db2a792
0x6db2a794
0x6db2a796
0x6db2a798
0x6db2a79a
0x6db2a79c
0x6db2a79e
0x6db2a7a0
0x6db2a7a2
0x6db2a7a4
0x6db2a7a6
0x6db2a7a8
0x6db2a7aa
0x6db2a7ac
0x6db2a7ae
0x6db2a7b0
0x6db2a7b2
0x6db2a7b4
0x6db2a7b6
0x6db2a7b8
0x6db2a7ba
0x6db2a7bc
0x6db2a7be
0x6db2a7c0
0x6db2a7c2
0x6db2a7c4
0x6db2a7c6
0x6db2a7c8
0x6db2a7ca
0x6db2a7cc
0x6db2a7ce
0x6db2a7d0
0x6db2a7d2
0x6db2a7d4
0x6db2a7d6
0x6db2a7d8
0x6db2a7da
0x6db2a7dc
0x6db2a7de
0x6db2a7e0
0x6db2a7e2
0x6db2a7e4
0x6db2a7e6
0x6db2a7e8
0x6db2a7ea
0x6db2a7ec
0x6db2a7ee
0x6db2a7f0
0x6db2a7f2
0x6db2a7f4
0x6db2a7f6
0x6db2a7f8
0x6db2a7fa
0x6db2a7fc
0x6db2a7fe
0x6db2a800
0x6db2a802
0x6db2a804
0x6db2a806
0x6db2a808
0x6db2a80a
0x6db2a80c
0x6db2a80e
0x6db2a810
0x6db2a812
0x6db2a814
0x6db2a816
0x6db2a818
0x6db2a81a
0x6db2a81c
0x6db2a81e
0x6db2a820
0x6db2a822
0x6db2a824
0x6db2a826
0x6db2a828
0x6db2a82a
0x6db2a82c
0x6db2a82e
0x6db2a830
0x6db2a832
0x6db2a834
0x6db2a836
0x6db2a838
0x6db2a83a
0x6db2a83c
0x6db2a83e
0x6db2a840
0x6db2a842
0x6db2a844
0x6db2a846
0x6db2a848
0x6db2a84a
0x6db2a84c
0x6db2a84e
0x6db2a850
0x6db2a852
0x6db2a854
0x6db2a856
0x6db2a858
0x6db2a85a
0x6db2a85c
0x6db2a85e
0x6db2a860
0x6db2a862
0x6db2a864
0x6db2a866
0x6db2a868
0x6db2a86a
0x6db2a86c
0x6db2a86e
0x6db2a870
0x6db2a872
0x6db2a874
0x6db2a876
0x6db2a878
0x6db2a87a
0x6db2a87c
0x6db2a87e
0x6db2a880
0x6db2a882
0x6db2a884
0x6db2a886
0x6db2a888
0x6db2a88a
0x6db2a88c
0x6db2a88e
0x6db2a890
0x6db2a892
0x6db2a894
0x6db2a896
0x6db2a898
0x6db2a89a
0x6db2a89c
0x6db2a89e
0x6db2a8a0
0x6db2a8a2
0x6db2a8a4
0x6db2a8a6
0x6db2a8a8
0x6db2a8aa
0x6db2a8ac
0x6db2a8ae
0x6db2a8b0
0x6db2a8b2
0x6db2a8b4
0x6db2a8b6
0x6db2a8b8
0x6db2a8ba
0x6db2a8bc
0x6db2a8be
0x6db2a8c0
0x6db2a8c2
0x6db2a8c4
0x6db2a8c6
0x6db2a8c8
0x6db2a8ca
0x6db2a8cc
0x6db2a8ce
0x6db2a8d0
0x6db2a8d2
0x6db2a8d4
0x6db2a8d6
0x6db2a8d8
0x6db2a8da
0x6db2a8dc
0x6db2a8de
0x6db2a8e0
0x6db2a8e2
0x6db2a8e4
0x6db2a8e6
0x6db2a8e8
0x6db2a8ea
0x6db2a8ec
0x6db2a8ee
0x6db2a8f0
0x6db2a8f2
0x6db2a8f4
0x6db2a8f6
0x6db2a8f8
0x6db2a8fa
0x6db2a8fc
0x6db2a8fe
0x6db2a900
0x6db2a902
0x6db2a904
0x6db2a906
0x6db2a908
0x6db2a90a
0x6db2a90c
0x6db2a90e
0x6db2a910
0x6db2a912
0x6db2a914
0x6db2a916
0x6db2a918
0x6db2a91a
0x6db2a91c
0x6db2a91e
0x6db2a920
0x6db2a922
0x6db2a924
0x6db2a926
0x6db2a928
0x6db2a92a
0x6db2a92c
0x6db2a92e
0x6db2a930
0x6db2a932
0x6db2a934
0x6db2a936
0x6db2a938
0x6db2a93a
0x6db2a93c
0x6db2a93e
0x6db2a940
0x6db2a942
0x6db2a944
0x6db2a946
0x6db2a948
0x6db2a94a
0x6db2a94c
0x6db2a94e
0x6db2a950
0x6db2a952
0x6db2a954
0x6db2a956
0x6db2a958
0x6db2a95a
0x6db2a95c
0x6db2a95e
0x6db2a960
0x6db2a962
0x6db2a964
0x6db2a966
0x6db2a968
0x6db2a96a
0x6db2a96c
0x6db2a96e
0x6db2a970
0x6db2a972
0x6db2a974
0x6db2a976
0x6db2a978
0x6db2a97a
0x6db2a97c
0x6db2a97e
0x6db2a980
0x6db2a982
0x6db2a984
0x6db2a986
0x6db2a988
0x6db2a98a
0x6db2a98c
0x6db2a98e
0x6db2a990
0x6db2a992
0x6db2a994
0x6db2a996
0x6db2a998
0x6db2a99a
0x6db2a99c
0x6db2a99e
0x6db2a9a0
0x6db2a9a2
0x6db2a9a4
0x6db2a9a6
0x6db2a9a8
0x6db2a9aa
0x6db2a9ac
0x6db2a9ae
0x6db2a9b0
0x6db2a9b2
0x6db2a9b4
0x6db2a9b6
0x6db2a9b8
0x6db2a9ba
0x6db2a9bc
0x6db2a9be
0x6db2a9c0
0x6db2a9c2
0x6db2a9c4
0x6db2a9c6
0x6db2a9c8
0x6db2a9ca
0x6db2a9cc
0x6db2a9ce
0x6db2a9d0
0x6db2a9d2
0x6db2a9d4
0x6db2a9d6
0x6db2a9d8
0x6db2a9da
0x6db2a9dc
0x6db2a9de
0x6db2a9e0
0x6db2a9e2
0x6db2a9e4
0x6db2a9e6
0x6db2a9e8
0x6db2a9ea
0x6db2a9ec
0x6db2a9ee
0x6db2a9f0
0x6db2a9f2
0x6db2a9f4
0x6db2a9f6
0x6db2a9f8
0x6db2a9fa
0x6db2a9fc
0x6db2a9fe
0x6db2aa00
0x6db2aa02
0x6db2aa04
0x6db2aa06
0x6db2aa08
0x6db2aa0a
0x6db2aa0c
0x6db2aa0e
0x6db2aa10
0x6db2aa12
0x6db2aa14
0x6db2aa16
0x6db2aa18
0x6db2aa1a
0x6db2aa1c
0x6db2aa1e
0x6db2aa20
0x6db2aa22
0x6db2aa24
0x6db2aa26
0x6db2aa28
0x6db2aa2a
0x6db2aa2c
0x6db2aa2e
0x6db2aa30
0x6db2aa32
0x6db2aa34
0x6db2aa36
0x6db2aa38
0x6db2aa3a
0x6db2aa3c
0x6db2aa3e
0x6db2aa40
0x6db2aa42
0x6db2aa44
0x6db2aa46
0x6db2aa48
0x6db2aa4a
0x6db2aa4c
0x6db2aa4e
0x6db2aa50
0x6db2aa52
0x6db2aa54
0x6db2aa56
0x6db2aa58
0x6db2aa5a
0x6db2aa5c
0x6db2aa5e
0x6db2aa60
0x6db2aa62
0x6db2aa64
0x6db2aa66
0x6db2aa68
0x6db2aa6a
0x6db2aa6c
0x6db2aa6e
0x6db2aa70
0x6db2aa72
0x6db2aa74
0x6db2aa76
0x6db2aa78
0x6db2aa7a
0x6db2aa7c
0x6db2aa7e
0x6db2aa80
0x6db2aa82
0x6db2aa84
0x6db2aa86
0x6db2aa88
0x6db2aa8a
0x6db2aa8c
0x6db2aa8e
0x6db2aa90
0x6db2aa92
0x6db2aa94
0x6db2aa96
0x6db2aa98
0x6db2aa9a
0x6db2aa9c
0x6db2aa9e
0x6db2aaa0
0x6db2aaa2
0x6db2aaa4
0x6db2aaa6
0x6db2aaa8
0x6db2aaaa
0x6db2aaac
0x6db2aaae
0x6db2aab0
0x6db2aab2
0x6db2aab4
0x6db2aab6
0x6db2aab8
0x6db2aaba
0x6db2aabc
0x6db2aabe
0x6db2aac0
0x6db2aac2
0x6db2aac4
0x6db2aac6
0x6db2aac8
0x6db2aaca
0x6db2aacc
0x6db2aace
0x6db2aad0
0x6db2aad2
0x6db2aad4
0x6db2aad6
0x6db2aad8
0x6db2aada
0x6db2aadc
0x6db2aade
0x6db2aae0
0x6db2aae2
0x6db2aae4
0x6db2aae6
0x6db2aae8
0x6db2aaea
0x6db2aaec
0x6db2aaee
0x6db2aaf0
0x6db2aaf2
0x6db2aaf4
0x6db2aaf6
0x6db2aaf8
0x6db2aafa
0x6db2aafc
0x6db2aafe
0x6db2ab00
0x6db2ab02
0x6db2ab04
0x6db2ab06
0x6db2ab08
0x6db2ab0a
0x6db2ab0c
0x6db2ab0e
0x6db2ab10
0x6db2ab12
0x6db2ab14
0x6db2ab16
0x6db2ab18
0x6db2ab1a
0x6db2ab1c
0x6db2ab1e
0x6db2ab20
0x6db2ab22
0x6db2ab24
0x6db2ab26
0x6db2ab28
0x6db2ab2a
0x6db2ab2c
0x6db2ab2e
0x6db2ab30
0x6db2ab32
0x6db2ab34
0x6db2ab36
0x6db2ab38
0x6db2ab3a
0x6db2ab3c
0x6db2ab3e
0x6db2ab40
0x6db2ab42
0x6db2ab44
0x6db2ab46
0x6db2ab48
0x6db2ab4a
0x6db2ab4c
0x6db2ab4e
0x6db2ab50
0x6db2ab52
0x6db2ab54
0x6db2ab56
0x6db2ab58
0x6db2ab5a
0x6db2ab5c
0x6db2ab5e
0x6db2ab60
0x6db2ab62
0x6db2ab64
0x6db2ab66
0x6db2ab68
0x6db2ab6a
0x6db2ab6c
0x6db2ab6e
0x6db2ab70
0x6db2ab72
0x6db2ab74
0x6db2ab76
0x6db2ab78
0x6db2ab7a
0x6db2ab7c
0x6db2ab7e
0x6db2ab80
0x6db2ab82
0x6db2ab84
0x6db2ab86
0x6db2ab88
0x6db2ab8a
0x6db2ab8c
0x6db2ab8e
0x6db2ab90
0x6db2ab92
0x6db2ab94
0x6db2ab96
0x6db2ab98
0x6db2ab9a
0x6db2ab9c
0x6db2ab9e
0x6db2aba0
0x6db2aba2
0x6db2aba4
0x6db2aba6
0x6db2aba8
0x6db2abaa
0x6db2abac
0x6db2abae
0x6db2abb0
0x6db2abb2
0x6db2abb4
0x6db2abb6
0x6db2abb8
0x6db2abba
0x6db2abbc
0x6db2abbe
0x6db2abc0
0x6db2abc2
0x6db2abc4
0x6db2abc6
0x6db2abc8
0x6db2abca
0x6db2abcc
0x6db2abce
0x6db2abd0
0x6db2abd2
0x6db2abd4
0x6db2abd6
0x6db2abd8
0x6db2abda
0x6db2abdc
0x6db2abde
0x6db2abe0
0x6db2abe2
0x6db2abe4
0x6db2abe6
0x6db2abe8
0x6db2abea
0x6db2abec
0x6db2abee
0x6db2abf0
0x6db2abf2
0x6db2abf4
0x6db2abf6
0x6db2abf8
0x6db2abfa
0x6db2abfc
0x6db2abfe
0x6db2ac00
0x6db2ac02
0x6db2ac04
0x6db2ac06
0x6db2ac08
0x6db2ac0a
0x6db2ac0c
0x6db2ac0e
0x6db2ac10
0x6db2ac12
0x6db2ac14
0x6db2ac16
0x6db2ac18
0x6db2ac1a
0x6db2ac1c
0x6db2ac1e
0x6db2ac20
0x6db2ac22
0x6db2ac24
0x6db2ac26
0x6db2ac28
0x6db2ac2a
0x6db2ac2c
0x6db2ac2e
0x6db2ac30
0x6db2ac32
0x6db2ac34
0x6db2ac36
0x6db2ac38
0x6db2ac3a
0x6db2ac3c
0x6db2ac3e
0x6db2ac40
0x6db2ac42
0x6db2ac44
0x6db2ac46
0x6db2ac48
0x6db2ac4a
0x6db2ac4c
0x6db2ac4e
0x6db2ac50
0x6db2ac52
0x6db2ac54
0x6db2ac56
0x6db2ac58
0x6db2ac5a
0x6db2ac5c
0x6db2ac5e
0x6db2ac60
0x6db2ac62
0x6db2ac64
0x6db2ac66
0x6db2ac68
0x6db2ac6a
0x6db2ac6c
0x6db2ac6e
0x6db2ac70
0x6db2ac72
0x6db2ac74
0x6db2ac76
0x6db2ac78
0x6db2ac7a
0x6db2ac7c
0x6db2ac7e
0x6db2ac80
0x6db2ac82
0x6db2ac84
0x6db2ac86
0x6db2ac88
0x6db2ac8a
0x6db2ac8c
0x6db2ac8e
0x6db2ac90
0x6db2ac92
0x6db2ac94
0x6db2ac96
0x6db2ac98
0x6db2ac9a
0x6db2ac9c
0x6db2ac9e
0x6db2aca0
0x6db2aca2
0x6db2aca4
0x6db2aca6
0x6db2aca8
0x6db2acaa
0x6db2acac
0x6db2acae
0x6db2acb0
0x6db2acb2
0x6db2acb4
0x6db2acb6
0x6db2acb8
0x6db2acba
0x6db2acbc
0x6db2acbe
0x6db2acc0
0x6db2acc2
0x6db2acc4
0x6db2acc6
0x6db2acc8
0x6db2acca
0x6db2accc
0x6db2acce
0x6db2acd0
0x6db2acd2
0x6db2acd4
0x6db2acd6
0x6db2acd8
0x6db2acda
0x6db2acdc
0x6db2acde
0x6db2ace0
0x6db2ace2
0x6db2ace4
0x6db2ace6
0x6db2ace8
0x6db2acea
0x6db2acec
0x6db2acee
0x6db2acf0
0x6db2acf2
0x6db2acf4
0x6db2acf6
0x6db2acf8
0x6db2acfa
0x6db2acfc
0x6db2acfe
0x6db2ad00
0x6db2ad02
0x6db2ad04
0x6db2ad06
0x6db2ad08
0x6db2ad0a
0x6db2ad0c
0x6db2ad0e
0x6db2ad10
0x6db2ad12
0x6db2ad14
0x6db2ad16
0x6db2ad18
0x6db2ad1a
0x6db2ad1c
0x6db2ad1e
0x6db2ad20
0x6db2ad22
0x6db2ad24
0x6db2ad26
0x6db2ad28
0x6db2ad2a
0x6db2ad2c
0x6db2ad2e
0x6db2ad30
0x6db2ad32
0x6db2ad34
0x6db2ad36
0x6db2ad38
0x6db2ad3a
0x6db2ad3c
0x6db2ad3e
0x6db2ad40
0x6db2ad42
0x6db2ad44
0x6db2ad46
0x6db2ad48
0x6db2ad4a
0x6db2ad4c
0x6db2ad4e
0x6db2ad50
0x6db2ad52
0x6db2ad54
0x6db2ad56
0x6db2ad58
0x6db2ad5a
0x6db2ad5c
0x6db2ad5e
0x6db2ad60
0x6db2ad62
0x6db2ad64
0x6db2ad66
0x6db2ad68
0x6db2ad6a
0x6db2ad6c
0x6db2ad6e
0x6db2ad70
0x6db2ad72
0x6db2ad74
0x6db2ad76
0x6db2ad78
0x6db2ad7a
0x6db2ad7c
0x6db2ad7e
0x6db2ad80
0x6db2ad82
0x6db2ad84
0x6db2ad86
0x6db2ad88
0x6db2ad8a
0x6db2ad8c
0x6db2ad8e
0x6db2ad90
0x6db2ad92
0x6db2ad94
0x6db2ad96
0x6db2ad98
0x6db2ad9a
0x6db2ad9c
0x6db2ad9e
0x6db2ada0
0x6db2ada2
0x6db2ada4
0x6db2ada6
0x6db2ada8
0x6db2adaa
0x6db2adac
0x6db2adae
0x6db2adb0
0x6db2adb2
0x6db2adb4
0x6db2adb6
0x6db2adb8
0x6db2adba
0x6db2adbc
0x6db2adbe
0x6db2adc0
0x6db2adc2
0x6db2adc4
0x6db2adc6
0x6db2adc8
0x6db2adca
0x6db2adcc
0x6db2adce
0x6db2add0
0x6db2add2
0x6db2add4
0x6db2add6
0x6db2add8
0x6db2adda
0x6db2addc
0x6db2adde
0x6db2ade0
0x6db2ade2
0x6db2ade4
0x6db2ade6
0x6db2ade8
0x6db2adea
0x6db2adec
0x6db2adee
0x6db2adf0
0x6db2adf2
0x6db2adf4
0x6db2adf6
0x6db2adf8
0x6db2adfa
0x6db2adfc
0x6db2adfe
0x6db2ae00
0x6db2ae02
0x6db2ae04
0x6db2ae06
0x6db2ae08
0x6db2ae0a
0x6db2ae0c
0x6db2ae0e
0x6db2ae10
0x6db2ae12
0x6db2ae14
0x6db2ae16
0x6db2ae18
0x6db2ae1a
0x6db2ae1c
0x6db2ae1e
0x6db2ae20
0x6db2ae22
0x6db2ae24
0x6db2ae26
0x6db2ae28
0x6db2ae2a
0x6db2ae2c
0x6db2ae2e
0x6db2ae30
0x6db2ae32
0x6db2ae34
0x6db2ae36
0x6db2ae38
0x6db2ae3a
0x6db2ae3c
0x6db2ae3e
0x6db2ae40
0x6db2ae42
0x6db2ae44
0x6db2ae46
0x6db2ae48
0x6db2ae4a
0x6db2ae4c
0x6db2ae4e
0x6db2ae50
0x6db2ae52
0x6db2ae54
0x6db2ae56
0x6db2ae58
0x6db2ae5a
0x6db2ae5c
0x6db2ae5e
0x6db2ae60
0x6db2ae62
0x6db2ae64
0x6db2ae66
0x6db2ae68
0x6db2ae6a
0x6db2ae6c
0x6db2ae6e
0x6db2ae70
0x6db2ae72
0x6db2ae74
0x6db2ae76
0x6db2ae78
0x6db2ae7a
0x6db2ae7c
0x6db2ae7e
0x6db2ae80
0x6db2ae82
0x6db2ae84
0x6db2ae86
0x6db2ae88
0x6db2ae8a
0x6db2ae8c
0x6db2ae8e
0x6db2ae90
0x6db2ae92
0x6db2ae94
0x6db2ae96
0x6db2ae98
0x6db2ae9a
0x6db2ae9c
0x6db2ae9e
0x6db2aea0
0x6db2aea2
0x6db2aea4
0x6db2aea6
0x6db2aea8
0x6db2aeaa
0x6db2aeac
0x6db2aeae
0x6db2aeb0
0x6db2aeb2
0x6db2aeb4
0x6db2aeb6
0x6db2aeb8
0x6db2aeba
0x6db2aebc
0x6db2aebe
0x6db2aec0
0x6db2aec2
0x6db2aec4
0x6db2aec6
0x6db2aec8
0x6db2aeca
0x6db2aecc
0x6db2aece
0x6db2aed0
0x6db2aed2
0x6db2aed4
0x6db2aed6
0x6db2aed8
0x6db2aeda
0x6db2aedc
0x6db2aede
0x6db2aee0
0x6db2aee2
0x6db2aee4
0x6db2aee6
0x6db2aee8
0x6db2aeea
0x6db2aeec
0x6db2aeee
0x6db2aef0
0x6db2aef2
0x6db2aef4
0x6db2aef6
0x6db2aef8
0x6db2aefa
0x6db2aefc
0x6db2aefe
0x6db2af00
0x6db2af02
0x6db2af04
0x6db2af06
0x6db2af08
0x6db2af0a
0x6db2af0c
0x6db2af0e
0x6db2af10
0x6db2af12
0x6db2af14
0x6db2af16
0x6db2af18
0x6db2af1a
0x6db2af1c
0x6db2af1e
0x6db2af20
0x6db2af22
0x6db2af24
0x6db2af26
0x6db2af28
0x6db2af2a
0x6db2af2c
0x6db2af2e
0x6db2af30
0x6db2af32
0x6db2af34
0x6db2af36
0x6db2af38
0x6db2af3a
0x6db2af3c
0x6db2af3e
0x6db2af40
0x6db2af42
0x6db2af44
0x6db2af46
0x6db2af48
0x6db2af4a
0x6db2af4c
0x6db2af4e
0x6db2af50
0x6db2af52
0x6db2af54
0x6db2af56
0x6db2af58
0x6db2af5a
0x6db2af5c
0x6db2af5e
0x6db2af60
0x6db2af62
0x6db2af64
0x6db2af66
0x6db2af68
0x6db2af6a
0x6db2af6c
0x6db2af6e
0x6db2af70
0x6db2af72
0x6db2af74
0x6db2af76
0x6db2af78
0x6db2af7a
0x6db2af7c
0x6db2af7e
0x6db2af80
0x6db2af82
0x6db2af84
0x6db2af86
0x6db2af88
0x6db2af8a
0x6db2af8c
0x6db2af8e
0x6db2af90
0x6db2af92
0x6db2af94
0x6db2af96
0x6db2af98
0x6db2af9a
0x6db2af9c
0x6db2af9e
0x6db2afa0
0x6db2afa2
0x6db2afa4
0x6db2afa6
0x6db2afa8
0x6db2afaa
0x6db2afac
0x6db2afae
0x6db2afb0
0x6db2afb2
0x6db2afb4
0x6db2afb6
0x6db2afb8
0x6db2afba
0x6db2afbc
0x6db2afbe
0x6db2afc0
0x6db2afc2
0x6db2afc4
0x6db2afc6
0x6db2afc8
0x6db2afca
0x6db2afcc
0x6db2afce
0x6db2afd0
0x6db2afd2
0x6db2afd4
0x6db2afd6
0x6db2afd8
0x6db2afda
0x6db2afdc
0x6db2afde
0x6db2afe0
0x6db2afe2
0x6db2afe4
0x6db2afe6
0x6db2afe8
0x6db2afea
0x6db2afec
0x6db2afee
0x6db2aff0
0x6db2aff2
0x6db2aff4
0x6db2aff6
0x6db2aff8
0x6db2affa
0x6db2affc
0x6db2affe
0x6db2affe
0x6db2b000
0x6db2b001
0x6db2b064
0x6db2b064
0x6db2b067
0x00000000
0x00000000
0x00000000
0x00000000
0x6db2b003
0x6db2b003
0x6db2b034
0x6db2b034
0x6db2b035
0x00000000
0x6db2b037
0x6db2b037
0x00000000
0x6db2b037
0x6db2b005
0x6db2b005
0x6db2b074
0x6db2b074
0x00000000
0x6db2b007
0x6db2b007
0x6db2b038
0x6db2b038
0x6db2b069
0x6db2b069
0x00000000
0x6db2b06c
0x6db2b06c
0x6db2b071
0x6db2b071
0x00000000
0x6db2b071
0x6db2b03a
0x6db2b03a
0x6db2b0a5
0x6db2b0c7
0x6db2b0c7
0x00000000
0x6db2b0a7
0x6db2b0a7
0x6db2b0aa
0x6db2b0ac
0x6db2b0ac
0x6db2b0ad
0x00000000
0x6db2b0af
0x6db2b0af
0x00000000
0x6db2b0b2
0x6db2b0b2
0x6db2b0b2
0x00000000
0x6db2b0b2
0x6db2b0af
0x6db2b0ad
0x6db2b03c
0x6db2b03c
0x6db2b03d
0x6db2b0b3
0x6db2b0b3
0x6db2b0b4
0x00000000
0x6db2b03f
0x6db2b03f
0x6db2b044
0x6db2b075
0x6db2b075
0x6db2b07a
0x6db2b07b
0x6db2b07c
0x6db2b07d
0x6db2b07d
0x6db2b07e
0x6db2b07f
0x00000000
0x6db2b046
0x6db2b046
0x6db2b0ba
0x6db2b0ba
0x6db2b0be
0x6db2b0be
0x6db2b048
0x6db2b048
0x6db2b04a
0x6db2b04d
0x6db2b0b8
0x6db2b0b8
0x6db2b0b8
0x00000000
0x6db2b04f
0x6db2b04f
0x6db2b080
0x6db2b080
0x6db2b081
0x6db2b082
0x6db2b083
0x6db2b085
0x6db2b089
0x6db2b089
0x6db2b08b
0x6db2b08e
0x00000000
0x6db2b090
0x6db2b090
0x00000000
0x6db2b093
0x6db2b093
0x6db2b0b5
0x6db2b0b5
0x6db2b0b5
0x6db2b0b5
0x00000000
0x6db2b095
0x6db2b095
0x6db2b095
0x6db2b097
0x6db2b097
0x6db2b09a
0x00000000
0x6db2b09c
0x6db2b09c
0x6db2b09c
0x6db2b0a0
0x6db2b0a0
0x6db2b0a0
0x6db2b0a0
0x6db2b09a
0x6db2b093
0x6db2b090
0x6db2b052
0x6db2b052
0x6db2b054
0x6db2b056
0x6db2b056
0x6db2b056
0x6db2b059
0x6db2b0cd
0x6db2b0cd
0x6db2b0ce
0x6db2b0ce
0x6db2b0d2
0x6db2b0d2
0x6db2b0d7
0x6db2b0d7
0x6db2b0d7
0x6db2b0da
0x6db2b0fc
0x6db2b0fc
0x6db2b0fd
0x00000000
0x6db2b0ff
0x6db2b0ff
0x00000000
0x6db2b101
0x6db2b101
0x00000000
0x00000000
0x00000000
0x00000000
0x6db2b101
0x6db2b0ff
0x6db2b0dc
0x6db2b0dc
0x6db2b0e1
0x6db2b0e3
0x6db2b0e4
0x6db2b0e9
0x6db2b0e9
0x6db2b0e9
0x6db2b0eb
0x6db2b0f0
0x6db2b12f
0x6db2b12f
0x6db2b130
0x6db2b130
0x6db2b0f2
0x6db2b0f2
0x6db2b0f2
0x6db2b0f2
0x6db2b0f7
0x6db2b103
0x6db2b103
0x6db2b134
0x00000000
0x6db2b136
0x6db2b136
0x00000000
0x6db2b138
0x6db2b138
0x6db2b139
0x00000000
0x6db2b13b
0x6db2b13b
0x6db2b140
0x00000000
0x6db2b142
0x6db2b142
0x6db2b1b6
0x6db2b1b6
0x00000000
0x6db2b144
0x6db2b144
0x6db2b146
0x00000000
0x6db2b148
0x6db2b148
0x00000000
0x6db2b148
0x6db2b146
0x6db2b142
0x6db2b140
0x6db2b139
0x6db2b136
0x6db2b105
0x6db2b105
0x6db2b108
0x6db2b109
0x6db2b10b
0x6db2b10c
0x6db2b10c
0x6db2b10e
0x6db2b10e
0x6db2b111
0x6db2b149
0x6db2b149
0x6db2b14a
0x6db2b14d
0x6db2b14f
0x6db2b151
0x6db2b151
0x6db2b153
0x00000000
0x00000000
0x00000000
0x00000000
0x6db2b113
0x6db2b113
0x6db2b115
0x6db2b115
0x6db2b115
0x6db2b118
0x6db2b11b
0x6db2b120
0x6db2b122
0x6db2b122
0x6db2b123
0x6db2b123
0x6db2b126
0x6db2b126
0x6db2b155
0x6db2b155
0x6db2b156
0x6db2b157
0x6db2b15a
0x00000000
0x6db2b15c
0x6db2b15c
0x6db2b15e
0x6db2b15e
0x00000000
0x6db2b15e
0x6db2b128
0x6db2b128
0x6db2b160
0x6db2b160
0x6db2b1ce
0x6db2b1ce
0x6db2b1d0
0x6db2b1d5
0x6db2b1d7
0x6db2b1da
0x6db2b1db
0x6db2b1db
0x6db2b1df
0x6db2b1e3
0x6db2b1ed
0x6db2b1ed
0x6db2b1f0
0x6db2b1f0
0x6db2b162
0x6db2b162
0x6db2b162
0x6db2b165
0x6db2b165
0x6db2b1c8
0x6db2b1c8
0x6db2b1c8
0x6db2b1ca
0x6db2b1cb
0x6db2b1cc
0x6db2b1cc
0x6db2b1cd
0x6db2b1cd
0x00000000
0x6db2b167
0x6db2b167
0x6db2b168
0x6db2b168
0x6db2b170
0x6db2b170
0x6db2b170
0x6db2b171
0x6db2b171
0x6db2b172
0x6db2b173
0x6db2b174
0x6db2b175
0x6db2b176
0x6db2b178
0x6db2b179
0x6db2b17b
0x6db2b17b
0x6db2b17c
0x6db2b17c
0x6db2b17f
0x6db2b17f
0x6db2b181
0x6db2b1fa
0x6db2b1ff
0x6db2b1ff
0x6db2b183
0x6db2b183
0x6db2b184
0x6db2b185
0x6db2b188
0x6db2b1aa
0x6db2b1aa
0x6db2b1ac
0x6db2b1ac
0x6db2b1af
0x6db2b1af
0x6db2b1b2
0x6db2b1b2
0x6db2b18a
0x6db2b18a
0x6db2b18c
0x6db2b18f
0x6db2b190
0x6db2b190
0x6db2b192
0x6db2b196
0x6db2b1b8
0x6db2b1b8
0x6db2b1bf
0x6db2b1bf
0x6db2b1c1
0x6db2b1c2
0x6db2b1c2
0x00000000
0x6db2b198
0x6db2b198
0x6db2b19b
0x6db2b19b
0x6db2b19c
0x6db2b19e
0x6db2b1a0
0x6db2b1a0
0x6db2b1a1
0x6db2b1a1
0x6db2b216
0x6db2b219
0x00000000
0x6db2b1a3
0x6db2b1a3
0x6db2b1a4
0x6db2b21a
0x6db2b21a
0x6db2b221
0x6db2b227
0x6db2b227
0x6db2b227
0x6db2b22a
0x6db2b22b
0x6db2b1a6
0x6db2b1a6
0x6db2b1a6
0x00000000
0x6db2b1a6
0x6db2b1a4
0x6db2b1a1
0x6db2b196
0x6db2b188
0x6db2b181
0x6db2b165
0x6db2b12a
0x6db2b12a
0x6db2b12c
0x6db2b12d
0x6db2b12d
0x00000000
0x6db2b12d
0x6db2b128
0x6db2b126
0x6db2b111
0x6db2b0f9
0x6db2b0f9
0x6db2b0f9
0x6db2b0fb
0x6db2b0fb
0x00000000
0x6db2b0fb
0x6db2b0f7
0x6db2b0f0
0x6db2b05b
0x6db2b05b
0x6db2b062
0x6db2b062
0x00000000
0x6db2b062
0x6db2b059
0x6db2b04f
0x6db2b04d
0x6db2b046
0x6db2b044
0x6db2b03d
0x6db2b03a
0x6db2b009
0x6db2b009
0x6db2b00c
0x6db2b00d
0x6db2b00f
0x6db2b010
0x6db2b017
0x6db2b019
0x6db2b01c
0x6db2b01f
0x6db2b024
0x6db2b026
0x6db2b027
0x6db2b02e
0x6db2b030
0x6db2b031
0x6db2b031
0x00000000
0x6db2b031
0x6db2b007
0x6db2b005
0x6db2b003
0x6db2b2b2
0x6db2b2b2
0x6db24bcb
0x6db24bcb
0x6db24bd1
0x6db24bd7
0x6db24bde
0x6db24be1
0x6db24be5
0x6db24beb
0x6db24bee
0x6db24bf1
0x6db24bfd
0x6db24c03
0x6db24c06
0x6db24c08
0x00000000
0x6db24c0e
0x6db24c0e
0x6db24c11
0x6db24c13
0x6db24c15
0x6db24c16
0x6db24c17
0x6db24c18
0x6db24c19
0x6db24c19
0x6db24c08
0x6db24bc5
0x6db24b22

APIs

Part of subcall function 6DB248D0: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24B15,?,?,?,?,?,?,?,?,?,?,?), ref: 6DB248DC
Part of subcall function 6DB248D0: pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB2491C

GetCurrentThreadId.KERNEL32 ref: 6DB24B2B
CreateEventA.KERNEL32 ref: 6DB24B53

Part of subcall function 6DB24A20: pthread_spin_destroy.LIBWINPTHREAD-1 ref: 6DB24A2F

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6DB25ADA), ref: 6DB24B82
GetCurrentThread.KERNEL32 ref: 6DB24B86
GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6DB25ADA), ref: 6DB24B8E
DuplicateHandle.KERNEL32 ref: 6DB24BBA
GetThreadPriority.KERNEL32 ref: 6DB24BD1
TlsSetValue.KERNEL32 ref: 6DB24BFD
abort.MSVCRT(?,?,6DB249BC,?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB295C5

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Current$Thread$Process$CreateDuplicateEventHandlePriorityValueabortpthread_mutex_lockpthread_mutex_unlockpthread_spin_destroy
String ID:
API String ID: 3052336117-0
Opcode ID: 3743ab5fa07c9ea53b20a813be8abbc8e5421aad9b57f95281bcbd6c83460371
Instruction ID: 70da73a40b41002156f6e8eb08ee23ce0a9601ba3a9ea85a770153be5231599c
Opcode Fuzzy Hash: 3743ab5fa07c9ea53b20a813be8abbc8e5421aad9b57f95281bcbd6c83460371
Instruction Fuzzy Hash: AF3128B29047008FE710AF7AD54932ABBF0FF49315F014A2DE89A87695D774E408CF92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25DF7 Relevance: 12.1, APIs: 8, Instructions: 53
threadinjectionsynchronizationCOMMON

Download Yara Rule

C-Code - Quality: 16%

			E6DB25DF7(void* __ebx, void* __edi, intOrPtr __ebp, intOrPtr _a4, intOrPtr _a20, intOrPtr _a204) {
				intOrPtr _t23;
				intOrPtr* _t25;

				_t23 = __ebp;
				__eax =  *(__ebx + 0x14);
				_a20 = 0x10001;
				__eax = SuspendThread( *(__ebx + 0x14));
				__esp = __esp - 4;
				_a4 = 0;
				__eax =  *(__ebx + 0x14);
				 *__esp =  *(__ebx + 0x14);
				__eax = WaitForSingleObject(??, ??);
				__esp = __esp - 8;
				if(__eax == 0x102) {
					_a4 = __edi;
					__eax =  *(__ebx + 0x14);
					 *__esp =  *(__ebx + 0x14);
					__eax = GetThreadContext(??, ??);
					__esp = __esp - 8;
					_a4 = __edi;
					__eax =  *(__ebx + 0x14);
					_a204 = L6DB25A10;
					 *__esp =  *(__ebx + 0x14);
					SetThreadContext(??, ??) =  *(__ebx + 0x20) & 0x000000ff;
					 *(__ebx + 0x24) =  *(__ebx + 0x24) & 0xfffffffe;
					__esp = __esp - 8;
					 *(__ebx + 0x20) & 0xf0 =  *(__ebx + 0x20) & 0xf0 | 0x00000005;
					 *(__ebx + 0x20) = __al;
					asm("lock add dword [0x6db2c058], 0x1");
					__eax =  *(__ebx + 0x18);
					if(__eax != 0) {
						__eax = SetEvent(__eax);
						__esp = __esp - 4;
					}
					E6DB232E0(__ebp) =  *(__ebx + 0x14);
					__eax = ResumeThread( *(__ebx + 0x14));
					__esp = __esp - 4;
				}
				 *_t25 = _t23;
				E6DB232E0();
				return 0;
			}

0x6db25df7
0x6db25e00
0x6db25e03
0x6db25e0e
0x6db25e14
0x6db25e17
0x6db25e1f
0x6db25e22
0x6db25e25
0x6db25e2b
0x6db25e33
0x6db25e39
0x6db25e3d
0x6db25e40
0x6db25e43
0x6db25e49
0x6db25e4c
0x6db25e50
0x6db25e53
0x6db25e5e
0x6db25e67
0x6db25e6b
0x6db25e6f
0x6db25e75
0x6db25e78
0x6db25e7b
0x6db25e83
0x6db25e88
0x6db25e8d
0x6db25e93
0x6db25e93
0x6db25e9e
0x6db25ea4
0x6db25eaa
0x6db25eaa
0x6db25d4b
0x6db25d4e
0x6db25d5f

APIs

pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB25D4E
SuspendThread.KERNEL32 ref: 6DB25E0E
WaitForSingleObject.KERNEL32 ref: 6DB25E25
GetThreadContext.KERNEL32 ref: 6DB25E43
SetThreadContext.KERNEL32 ref: 6DB25E61
SetEvent.KERNEL32 ref: 6DB25E8D
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB25E99
ResumeThread.KERNEL32 ref: 6DB25EA4

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Thread$Contextpthread_mutex_unlock$EventObjectResumeSingleSuspendWait
String ID:
API String ID: 548557552-0
Opcode ID: 47e1ed1fdf4d8f65bb5b92c7cd98abac00609d13a422e972d9e27a1ba4b7fdfc
Instruction ID: a0a955a9ed673a3250b573564aa8b566d26297824a7acce510fa15ef4169d970
Opcode Fuzzy Hash: 47e1ed1fdf4d8f65bb5b92c7cd98abac00609d13a422e972d9e27a1ba4b7fdfc
Instruction Fuzzy Hash: 58115CB24042408FCB00AF79D58966A7FF0BF06311F020A2DE89A8B249D734D458CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6DB22397 Relevance: 12.1, APIs: 8, Instructions: 52
COMMON

Download Yara Rule

C-Code - Quality: 24%

			E6DB22397(void* __ebx, void* __edi, void* __esi, void* __ebp, int _a24, int _a28, int _a60) {
				void* _t17;

				_t17 = __esi;
				__eax = __ebx + 0x14;
				_a28 = __eax;
				 *__esp = __eax;
				__eax =  *0x6db2f23c();
				__esp = __esp - 4;
				__eflags = __eax;
				__eax =  *(__ebx + 0x68);
				if(__eflags == 0) {
					 *__esp = __ebp;
					__ecx = __edi;
					__edx = 1;
					__esi = 0x10;
					__eax = E6DB21A20(__eax, __edi, 1);
					goto L1;
				} else {
					__edx =  *((intOrPtr*)(__ebx + 0x10));
					__eflags =  *((intOrPtr*)(__ebx + 8)) -  *((intOrPtr*)(__ebx + 0x10));
					if( *((intOrPtr*)(__ebx + 8)) >  *((intOrPtr*)(__ebx + 0x10))) {
						 *__esp = __ebp;
						__ecx = __edi;
						__edx = 1;
						__eax = E6DB21A20(__eax, __edi, 1);
						__eflags = __eax;
						__esi = __eax;
						__eax = 0x10;
						__esi =  ==  ? 0x10 : __esi;
						__eax = _a24;
						 *__esp = _a24;
						__eax =  *0x6db2f1e0();
						__esp = __esp - 4;
						L1:
						return _t17;
					} else {
						__ecx = _a60;
						__edx = 1;
						 *_a60 = 0;
						__ecx = __edi;
						 *__esp = __ebp;
						__eax =  *(__ebx + 0x64);
						__ebp =  *0x6db2f184;
						CloseHandle( *(__ebx + 0x64)) =  *(__ebx + 0x68);
						__esp = __esp - 4;
						__eax = CloseHandle( *(__ebx + 0x68));
						__esp = __esp - 4;
						__ebp = _a24;
						 *__esp = __ebp;
						__eax =  *0x6db2f1e0();
						__esp = __esp - 4;
						 *__esp = __ebp;
						__ebp =  *0x6db2f190;
						__eax =  *__ebp();
						__esp = __esp - 4;
						 *__esp = __edi;
						 *__ebp() = __ebx + 0x2c;
						__esp = __esp - 4;
						 *__esp = __ebx + 0x2c;
						__eax =  *__ebp();
						__esp = __esp - 4;
						 *__esp = __ebx;
						L6DB29400();
						__esp =  &(__esp[0xb]);
						__eax = __esi;
						_pop(__ebx);
						_pop(__esi);
						_pop(__edi);
						_pop(__ebp);
						return __esi;
					}
				}
			}

0x6db22397
0x6db223a0
0x6db223a3
0x6db223a7
0x6db223aa
0x6db223b0
0x6db223b3
0x6db223b5
0x6db223b8
0x6db224c0
0x6db224c3
0x6db224c5
0x6db224ca
0x6db224cf
0x00000000
0x6db223be
0x6db223be
0x6db223c1
0x6db223c4
0x6db22440
0x6db22443
0x6db22445
0x6db2244a
0x6db2244f
0x6db22451
0x6db22453
0x6db22458
0x6db2245b
0x6db2245f
0x6db22462
0x6db22468
0x6db2238d
0x6db22396
0x6db223c6
0x6db223c6
0x6db223ca
0x6db223cf
0x6db223d5
0x6db223d7
0x6db223df
0x6db223e2
0x6db223ed
0x6db223f0
0x6db223f6
0x6db223f8
0x6db223fb
0x6db223ff
0x6db22402
0x6db22408
0x6db2240b
0x6db2240e
0x6db22414
0x6db22416
0x6db22419
0x6db2241e
0x6db22421
0x6db22424
0x6db22427
0x6db22429
0x6db2242c
0x6db2242f
0x6db22434
0x6db22437
0x6db22439
0x6db2243a
0x6db2243b
0x6db2243c
0x6db2243d
0x6db2243d
0x6db223c4

APIs

RtlTryEnterCriticalSection.NTDLL ref: 6DB223AA
RtlLeaveCriticalSection.NTDLL ref: 6DB22462

Part of subcall function 6DB21A20: RtlEnterCriticalSection.NTDLL ref: 6DB21A37
Part of subcall function 6DB21A20: ReleaseSemaphore.KERNEL32 ref: 6DB21A8E
Part of subcall function 6DB21A20: RtlLeaveCriticalSection.NTDLL ref: 6DB21A9E

CloseHandle.KERNEL32 ref: 6DB223EB
CloseHandle.KERNEL32 ref: 6DB223F6
RtlLeaveCriticalSection.NTDLL ref: 6DB22402
RtlDeleteCriticalSection.NTDLL ref: 6DB22414
RtlDeleteCriticalSection.NTDLL ref: 6DB2241C
RtlDeleteCriticalSection.NTDLL ref: 6DB22427
??3@YAXPAX@Z.MSVCRT ref: 6DB2242F

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CriticalSection$DeleteLeave$CloseEnterHandle$??3@ReleaseSemaphore
String ID:
API String ID: 2371872607-0
Opcode ID: 5bad3a57ee928bfc8ad0cf3e0da35b4896cb2b6ff3ed4bfe9e8012903870654f
Instruction ID: 398e64c6ab04a7fc9dabc521fac1e6333157d1618048dc2da9b9093169d4cfbe
Opcode Fuzzy Hash: 5bad3a57ee928bfc8ad0cf3e0da35b4896cb2b6ff3ed4bfe9e8012903870654f
Instruction Fuzzy Hash: 5511C5B65046448FDB00BF79D58622ABBF0EF45205F02097DDD9A8B209EB34E859CB86

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23100 Relevance: 10.6, APIs: 7, Instructions: 140COMMON

Download Yara Rule

APIs

_pthread_time_in_ms_from_timespec.LIBWINPTHREAD-1 ref: 6DB2311B
_pthread_time_in_ms.LIBWINPTHREAD-1 ref: 6DB23124

Part of subcall function 6DB22C50: GetSystemTimeAsFileTime.KERNEL32 ref: 6DB22C5D

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Time$FileSystem_pthread_time_in_ms_pthread_time_in_ms_from_timespec
String ID:
API String ID: 1543282791-0
Opcode ID: db5b2fe49dee5274e1fd5599c2d5ea3aacc652dcf9b29cd3bacd0de1e87b49b5
Instruction ID: dd35d61bfeda0f0963803fefd11bf0f039391c16ae52a2bbd4ff287c7df7c1ea
Opcode Fuzzy Hash: db5b2fe49dee5274e1fd5599c2d5ea3aacc652dcf9b29cd3bacd0de1e87b49b5
Instruction Fuzzy Hash: 3A415A727082468FDB049F69C88173AB7F1EB86712F15893DE95DCB388DB34C8458B91

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24650 Relevance: 10.6, APIs: 7, Instructions: 107
COMMON

Download Yara Rule

C-Code - Quality: 21%

			E6DB24650(intOrPtr* __eax) {
				intOrPtr _t27;
				intOrPtr _t29;
				intOrPtr _t30;
				intOrPtr _t31;
				intOrPtr _t34;
				intOrPtr _t36;
				signed int _t38;
				signed int _t39;
				intOrPtr _t44;
				intOrPtr* _t46;
				intOrPtr _t54;
				int _t55;
				signed int _t56;
				intOrPtr _t62;
				intOrPtr _t65;
				intOrPtr _t69;
				void* _t73;
				intOrPtr* _t74;
				intOrPtr* _t75;

				if(__eax == 0) {
					return __eax;
				} else {
					_t46 = __eax;
					_t74 = _t73 - 0x2c;
					_t27 =  *((intOrPtr*)(__eax + 0xb0));
					if(_t27 == 0) {
						 *_t74 = 0x6db2a018;
						E6DB22F90();
						_t65 =  *((intOrPtr*)(_t46 + 0xb4));
						__eflags = _t65;
						if(_t65 != 0) {
							_t69 =  *0x6db2c038;
							__eflags = _t69;
							if(_t69 != 0) {
								_t36 = _t69 - 1;
								_t62 =  *0x6db2c03c;
								_t55 = 0;
								 *((intOrPtr*)(_t74 + 0x1c)) = _t36;
								_t54 = _t36;
								while(1) {
									_t38 = _t55 + _t54 >> 1;
									__eflags = _t65 -  *((intOrPtr*)(_t62 + 4 + _t38 * 8));
									if(__eflags == 0) {
										break;
									}
									if(__eflags < 0) {
										__eflags = _t38 - _t55;
										if(_t38 != _t55) {
											_t54 = _t38 - 1;
											goto L17;
										}
									} else {
										_t55 = _t38 + 1;
										L17:
										__eflags = _t54 - _t55;
										if(_t54 >= _t55) {
											continue;
										}
									}
									goto L4;
								}
								_t39 = _t38 + 1;
								__eflags = _t69 - _t39;
								if(_t69 > _t39) {
									_t56 = _t39 * 8;
									 *(_t74 + 8) = (_t69 - _t39) * 8;
									 *((intOrPtr*)(_t74 + 4)) = _t62 + _t56;
									 *_t74 = _t62 + _t56 - 8;
									memmove(??, ??, ??);
								}
								_t44 =  *((intOrPtr*)(_t74 + 0x1c));
								 *0x6db2c038 = _t44;
								__eflags = _t44;
								if(_t44 == 0) {
									 *_t74 = _t62;
									L6DB29400();
									 *0x6db2c034 = 0;
									 *0x6db2c038 = 0;
								}
							}
						}
						L4:
						_t29 =  *((intOrPtr*)(_t46 + 0x2c));
						__eflags = _t29;
						if(_t29 != 0) {
							 *_t74 = _t29;
							L6DB29400();
						}
						_t30 =  *((intOrPtr*)(_t46 + 0x30));
						__eflags = _t30;
						if(_t30 != 0) {
							 *_t74 = _t30;
							L6DB29400();
						}
						_t31 =  *((intOrPtr*)(_t46 + 0x34));
						__eflags = _t31;
						if(_t31 != 0) {
							 *_t74 = _t31;
							L6DB29400();
						}
						_t6 = _t46 + 4; // 0x4
						 *_t46 = 0;
						 *((intOrPtr*)(_t46 + 0xb4)) = 0;
						memset(_t6 & 0xfffffffc, 0, _t46 - (_t6 & 0xfffffffc) + 0xb8 >> 2 << 2);
						_t75 = _t74 + 0xc;
						_t34 =  *0x6db2c040;
						__eflags = _t34;
						if(_t34 == 0) {
							 *0x6db2c040 = _t46;
							 *0x6db2c044 = _t46;
						} else {
							 *((intOrPtr*)(_t34 + 0xb0)) = _t46;
							 *0x6db2c040 = _t46;
						}
						 *_t75 = 0x6db2a018;
						return E6DB232E0();
					} else {
						return _t27;
					}
				}
			}

0x6db24652
0x6db24770
0x6db24658
0x6db2465c
0x6db2465e
0x6db24661
0x6db24669
0x6db24678
0x6db2467f
0x6db24684
0x6db2468a
0x6db2468c
0x6db24710
0x6db24716
0x6db24718
0x6db2471e
0x6db24721
0x6db24727
0x6db24729
0x6db2472d
0x6db2474b
0x6db2474e
0x6db24750
0x6db24754
0x00000000
0x00000000
0x6db24756
0x6db24738
0x6db2473a
0x6db24740
0x00000000
0x6db24740
0x6db24758
0x6db24758
0x6db24743
0x6db24743
0x6db24745
0x00000000
0x00000000
0x6db24745
0x00000000
0x6db24756
0x6db24778
0x6db2477b
0x6db2477d
0x6db247b3
0x6db247c1
0x6db247c8
0x6db247d0
0x6db247d3
0x6db247d3
0x6db2477f
0x6db24783
0x6db24788
0x6db2478a
0x6db24790
0x6db24793
0x6db24798
0x6db247a2
0x6db247a2
0x6db2478a
0x6db24718
0x6db24692
0x6db24692
0x6db24695
0x6db24697
0x6db24699
0x6db2469c
0x6db2469c
0x6db246a1
0x6db246a4
0x6db246a6
0x6db246a8
0x6db246ab
0x6db246ab
0x6db246b0
0x6db246b3
0x6db246b5
0x6db246b7
0x6db246ba
0x6db246ba
0x6db246bf
0x6db246c6
0x6db246cc
0x6db246e4
0x6db246e4
0x6db246e6
0x6db246eb
0x6db246ed
0x6db24760
0x6db24766
0x6db246ef
0x6db246ef
0x6db246f5
0x6db246f5
0x6db246fb
0x6db2470e
0x6db2466b
0x6db24672
0x6db24672
0x6db24669

APIs

pthread_mutex_lock.LIBWINPTHREAD-1(?,?,?,?,00000000,?,?,?,6DB25959,?,?,?,?,?,0000001C,6DB25A6F), ref: 6DB2467F
??3@YAXPAX@Z.MSVCRT ref: 6DB2469C
??3@YAXPAX@Z.MSVCRT ref: 6DB246AB
??3@YAXPAX@Z.MSVCRT ref: 6DB246BA
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,00000000,?,?,?,6DB25959,?,?,?,?,?,0000001C,6DB25A6F), ref: 6DB24702

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ??3@$pthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 4211330938-0
Opcode ID: 34ca547b7fec8902ff06f999214d776ace7c19864334ecd3a30785873c2e334c
Instruction ID: 3735cf2e19e24abf1dcc3299e1792548cfb1303c7543aba85d1628ca9ba8a1c9
Opcode Fuzzy Hash: 34ca547b7fec8902ff06f999214d776ace7c19864334ecd3a30785873c2e334c
Instruction Fuzzy Hash: 7E4179736086828BDB119F29D4807BBB7F5FB59304F42496DC95D8B61CE774E144CB82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB22883 Relevance: 10.6, APIs: 7, Instructions: 98COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6DB228A3
RtlLeaveCriticalSection.NTDLL ref: 6DB228BC
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB228EA

Part of subcall function 6DB21A20: RtlEnterCriticalSection.NTDLL ref: 6DB21A37
Part of subcall function 6DB21A20: ReleaseSemaphore.KERNEL32 ref: 6DB21A8E
Part of subcall function 6DB21A20: RtlLeaveCriticalSection.NTDLL ref: 6DB21A9E

RtlLeaveCriticalSection.NTDLL ref: 6DB22913
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB22922

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CriticalSection$Leave$Enterpthread_mutex_lock$ReleaseSemaphore
String ID:
API String ID: 1224211229-0
Opcode ID: ad3ca135d00a1e39ab83433a30f8acc6bb623bec7a1af093452f574bb5b92ad6
Instruction ID: c9a0a88bb030148e78efdd02ac2607f6d9b53df3b7b32ae512b2ba38e21faf65
Opcode Fuzzy Hash: ad3ca135d00a1e39ab83433a30f8acc6bb623bec7a1af093452f574bb5b92ad6
Instruction Fuzzy Hash: 754115B25183458FCB10EF29C08462ABBF0FF49314F414969DDA9CB249E731E986CB82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB26EF0 Relevance: 10.6, APIs: 7, Instructions: 92COMMON

Download Yara Rule

APIs

_pthread_rel_time_in_ms.LIBWINPTHREAD-1 ref: 6DB26F12

Part of subcall function 6DB22D00: GetSystemTimeAsFileTime.KERNEL32 ref: 6DB22D49

Part of subcall function 6DB26A90: pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB26AB3

pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB26F5E
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26F88
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26F98
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26FCE
_errno.MSVCRT ref: 6DB27001
sem_wait.LIBWINPTHREAD-1 ref: 6DB2701B

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_getclean$Time$FileSystem_errno_pthread_rel_time_in_mspthread_mutex_lockpthread_mutex_unlocksem_wait
String ID:
API String ID: 3124810977-0
Opcode ID: 03b4375e35efe498aa41add37d872535484dea69667a0c434515a2df862197fc
Instruction ID: 378cddd88001a212da82d386e44c72d052ee63a788c88fc12d5efea6e20457a2
Opcode Fuzzy Hash: 03b4375e35efe498aa41add37d872535484dea69667a0c434515a2df862197fc
Instruction Fuzzy Hash: F3311CB6A093408FD700DF29C48462EBBE4EF89768F454A2DF9ACD7354E774D9048B82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB258B0 Relevance: 10.6, APIs: 7, Instructions: 63COMMON

Download Yara Rule

APIs

Part of subcall function 6DB24AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6DB25ADA,?,?,?,?,6DB26ADD), ref: 6DB24AED

_longjmpex.MSVCRT ref: 6DB258E6
TlsGetValue.KERNEL32(?,?,?,0000001C,6DB25A6F,?,?,?,?,00000000,6DB25B55,?,?,?,?,6DB26ADD), ref: 6DB258F4
CloseHandle.KERNEL32(?,?,?,?,0000001C,6DB25A6F,?,?,?,?,00000000,6DB25B55,?,?,?,?), ref: 6DB2591B
_endthreadex.MSVCRT(?,?,?,?,0000001C,6DB25A6F,?,?,?,?,00000000,6DB25B55,?,?,?,?), ref: 6DB25932
CloseHandle.KERNEL32(?,?,?,?,0000001C,6DB25A6F,?,?,?,?,00000000,6DB25B55,?,?,?,?), ref: 6DB25944
TlsSetValue.KERNEL32 ref: 6DB25969
CloseHandle.KERNEL32(?,?,?,?,0000001C,6DB25A6F,?,?,?,?,00000000,6DB25B55,?,?,?,?), ref: 6DB25980

Part of subcall function 6DB24C60: __pth_gpointer_locked.LIBWINPTHREAD-1(?,?,?,?,?,?,00000000,?,?,?,6DB258D2,?,?,?,0000001C,6DB25A6F), ref: 6DB24C6A
Part of subcall function 6DB24C60: pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB24C8B
Part of subcall function 6DB24C60: pthread_rwlock_rdlock.LIBWINPTHREAD-1 ref: 6DB24CCE
Part of subcall function 6DB24C60: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB24CF2
Part of subcall function 6DB24C60: pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB24D05
Part of subcall function 6DB24C60: pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6DB24D1C
Part of subcall function 6DB24C60: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB24D29

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CloseHandleValue$pthread_spin_lockpthread_spin_unlock$__pth_gpointer_locked_endthreadex_longjmpexpthread_rwlock_rdlockpthread_rwlock_unlock
String ID:
API String ID: 1570456468-0
Opcode ID: 2c3a605d77805a56a107dc6da44b4c3a37d0e7a00ea0529839d2b3d89aa0f719
Instruction ID: 174fe68ee33c5139860f0d4106e805ee0caa93681184744a6c319e6d067d8c0a
Opcode Fuzzy Hash: 2c3a605d77805a56a107dc6da44b4c3a37d0e7a00ea0529839d2b3d89aa0f719
Instruction Fuzzy Hash: 3A210CB65083459FEF019F25C68973A7BF8FF09314F024498E9898B24ED775D844CB96

Uniqueness

Uniqueness Score: -1.00%

Function 6DB22AC1 Relevance: 10.6, APIs: 7, Instructions: 51COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6DB22A36
RtlLeaveCriticalSection.NTDLL ref: 6DB22A46
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB22A6F
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB22A7F
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB22A92
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB22A9F
_pthread_time_in_ms_from_timespec.LIBWINPTHREAD-1 ref: 6DB22AC8

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_getclean$CriticalSection$EnterLeave_pthread_time_in_ms_from_timespecpthread_mutex_unlock
String ID:
API String ID: 222663773-0
Opcode ID: 8836df7d3052229473dffab7614857fbd3261aaf9037f991a624ff63522faafd
Instruction ID: d2211a3121f8dfe3a2c69459c53a8c3483cf23a38031fed82c0cdfaf99f92133
Opcode Fuzzy Hash: 8836df7d3052229473dffab7614857fbd3261aaf9037f991a624ff63522faafd
Instruction Fuzzy Hash: 6D113A764193408FC350AF29C08122EBBF4BF88364F814A2DE89ADB268D774D944CF83

Uniqueness

Uniqueness Score: -1.00%

Function 6DB247E0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 50COMMON

Download Yara Rule

APIs

pthread_spin_lock.LIBWINPTHREAD-1(?,?,00000000,00000004,6DB249D9,?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB247EE
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB2482E
fprintf.MSVCRT ref: 6DB2488C

Strings

%p not found?!?!, xrefs: 6DB24881

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: fprintfpthread_spin_lockpthread_spin_unlock
String ID: %p not found?!?!
API String ID: 3343314966-11085004
Opcode ID: d24ec286b410219c1e8f6a7bb9bf38a336e3d09c847e256f1e60f103f426c160
Instruction ID: 4fb97f36e2451b7f4183af2e141f65d83e7f18012126e2a7190df6238cf90d46
Opcode Fuzzy Hash: d24ec286b410219c1e8f6a7bb9bf38a336e3d09c847e256f1e60f103f426c160
Instruction Fuzzy Hash: 811130B39286D28ADB11AF75948463ABBE4FB1A204F02882DC59D9F60DD734D440CF52

Uniqueness

Uniqueness Score: -1.00%

Function 6DB21B38 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 49threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6DB21B59
fprintf.MSVCRT ref: 6DB21B83
GetCurrentThreadId.KERNEL32 ref: 6DB21B95
fprintf.MSVCRT ref: 6DB21BC7

Strings

C%p %d %s, xrefs: 6DB21B67
C%p %d V=%0X w=%ld %s, xrefs: 6DB21BBC

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CurrentThreadfprintf
String ID: C%p %d %s$C%p %d V=%0X w=%ld %s
API String ID: 1384477639-884133013
Opcode ID: 67a5d6e3b44646d47f8f3d7c175951341fae4acc251466ac964e712be635be70
Instruction ID: dbde690fdbba63c8d66df1ec9a29a47c0e5014b0a5be22a667d7e68fb268ee41
Opcode Fuzzy Hash: 67a5d6e3b44646d47f8f3d7c175951341fae4acc251466ac964e712be635be70
Instruction Fuzzy Hash: 2611F8B6A083019FDB14CF19D48466ABBF0FF89650F01881DE498D7318D730D841CF92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB27600 Relevance: 10.5, APIs: 7, Instructions: 48COMMON

Download Yara Rule

APIs

GetCurrentProcessId.KERNEL32 ref: 6DB27628
OpenProcess.KERNEL32 ref: 6DB27645
CloseHandle.KERNEL32 ref: 6DB27655
_errno.MSVCRT ref: 6DB27673

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Process$CloseCurrentHandleOpen_errno
String ID:
API String ID: 2250453136-0
Opcode ID: cbb6c96a0f455966555c84e5c6b4ba51b7e2326ddffc8c1c7fea174e98680a52
Instruction ID: d25bea9d4f0f84e5c8cddbb088fbf9c9fdcfe415d73088337316e70da31d35bb
Opcode Fuzzy Hash: cbb6c96a0f455966555c84e5c6b4ba51b7e2326ddffc8c1c7fea174e98680a52
Instruction Fuzzy Hash: 901182769183428FDB026F7DC68D32F3AB0EF0A365F420A28E85A8738DD7748404CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23870 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 46threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6DB23889
printf.MSVCRT ref: 6DB238AA
GetCurrentThreadId.KERNEL32 ref: 6DB238C5
printf.MSVCRT ref: 6DB23906

Strings

RWL%p %d V=%0X B=%d r=%ld w=%ld L=%p %s, xrefs: 6DB238FF
RWL%p %d %s, xrefs: 6DB23897

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CurrentThreadprintf
String ID: RWL%p %d %s$RWL%p %d V=%0X B=%d r=%ld w=%ld L=%p %s
API String ID: 2356641437-1971217749
Opcode ID: 6d40c9bae14c5ae51b631ace5f70452f0a48f66ec47b7d370e1e94b23ad598ca
Instruction ID: 66a2d1e4deb1ed24b81321083676783ce2c29d0819cfa6c37899d47ebe0bb237
Opcode Fuzzy Hash: 6d40c9bae14c5ae51b631ace5f70452f0a48f66ec47b7d370e1e94b23ad598ca
Instruction Fuzzy Hash: 9B11D3B6A083518FD700DF19D49466ABBF0EF89650F01891EE9888B358D731E945CB93

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24390 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 44COMMON

Download Yara Rule

APIs

pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,Error cleaning up spin_keys for thread ,6DB249A0,?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB2439E
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB243C8
pthread_mutex_init.LIBWINPTHREAD-1 ref: 6DB24408
calloc.MSVCRT ref: 6DB2441E

Strings

Error cleaning up spin_keys for thread , xrefs: 6DB24390

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: callocpthread_mutex_initpthread_spin_lockpthread_spin_unlock
String ID: Error cleaning up spin_keys for thread
API String ID: 3482582356-2906507043
Opcode ID: 42e7aaff06ceda1c0553df9c479dbd908ba3f29dd3b58da2cdc41a202f5c1e00
Instruction ID: a59e19f372f3910e6b3090c3d0834139a41aa5fc121816844973e9512d2953ce
Opcode Fuzzy Hash: 42e7aaff06ceda1c0553df9c479dbd908ba3f29dd3b58da2cdc41a202f5c1e00
Instruction Fuzzy Hash: 47012DB25083448FDB01AF64D084B7A7AF4BB19708F02847DD58D9F70AD3B598449FA2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24990 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 37
COMMON

Download Yara Rule

C-Code - Quality: 43%

			E6DB24990(void* __ecx, void* __edx, void* __eflags) {
				intOrPtr _v16;
				intOrPtr* _v20;
				char* _v24;
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr _t6;
				intOrPtr _t12;
				intOrPtr _t15;
				void* _t16;
				void* _t17;
				intOrPtr _t18;
				intOrPtr _t19;
				void* _t20;
				intOrPtr* _t21;

				_t17 = __edx;
				_t16 = __ecx;
				_t21 = _t20 - 0x10;
				_t6 = E6DB24390(0x6db2c050, __eflags);
				_t1 = _t6 + 4; // 0x4
				_t19 = _t1;
				_t15 = _t6;
				 *_t21 = _t19;
				E6DB22F90();
				_t18 =  *0x6db2c050;
				if(_t18 != 0) {
					__eflags = _t18 - 1;
					if(_t18 != 1) {
						 *_t21 = 2;
						_t12 =  *0x6db2a044();
						_v16 = _t18;
						_v20 = 0x6db2c050;
						_v24 = " once %p is %d\n";
						 *_t21 = _t12;
						fprintf(??, ??);
					}
				} else {
					E6DB24440(_t15, _t16, _t17, _t18, _t19);
					 *0x6db2c050 = 1;
				}
				 *_t21 = _t19;
				E6DB232E0();
				_t25 = _t15;
				if(_t15 != 0) {
					E6DB247E0(_t15, _t25);
				}
				return 0;
			}

0x6db24990
0x6db24990
0x6db24998
0x6db2499b
0x6db249a0
0x6db249a0
0x6db249a3
0x6db249a5
0x6db249a8
0x6db249ad
0x6db249b5
0x6db249e8
0x6db249eb
0x6db249ed
0x6db249f4
0x6db249fa
0x6db249fe
0x6db24a06
0x6db24a0e
0x6db24a11
0x6db24a11
0x6db249b7
0x6db249b7
0x6db249bc
0x6db249bc
0x6db249c6
0x6db249c9
0x6db249ce
0x6db249d0
0x6db249d4
0x6db249d4
0x6db249e1

APIs

Part of subcall function 6DB24390: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,Error cleaning up spin_keys for thread ,6DB249A0,?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB2439E
Part of subcall function 6DB24390: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB243C8
Part of subcall function 6DB24390: pthread_mutex_init.LIBWINPTHREAD-1 ref: 6DB24408
Part of subcall function 6DB24390: calloc.MSVCRT ref: 6DB2441E

pthread_mutex_lock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB249A8
pthread_tls_init.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB249B7

Part of subcall function 6DB24440: TlsAlloc.KERNEL32(?,?,6DB249BC,?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB24443

pthread_mutex_unlock.LIBWINPTHREAD-1(?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB249C9
fprintf.MSVCRT ref: 6DB24A11

Strings

Error cleaning up spin_keys for thread , xrefs: 6DB24996
once %p is %d, xrefs: 6DB24A06

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Alloccallocfprintfpthread_mutex_initpthread_mutex_lockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlockpthread_tls_init
String ID: once %p is %d$Error cleaning up spin_keys for thread
API String ID: 3187950583-1049478869
Opcode ID: a4ae0283e79cb09c8a83273d2b883c5d157db1d11b52a20e581695981623866c
Instruction ID: 0cde3ff0465a4c86b3d115225dc38ee499188d01a00dcb72474aa126b1baf888
Opcode Fuzzy Hash: a4ae0283e79cb09c8a83273d2b883c5d157db1d11b52a20e581695981623866c
Instruction Fuzzy Hash: 94F08C732182808FD700AF68958573FBBF4FF58748F02491DD69C5760DD73598418B82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25410 Relevance: 9.1, APIs: 6, Instructions: 110
COMMON

Download Yara Rule

C-Code - Quality: 37%

			E6DB25410(void* __edx, signed int* _a4, signed int _a8) {
				void* _v32;
				signed int* _v36;
				signed int _v52;
				signed int _v56;
				void* __ebp;
				void* _t22;
				void* _t26;
				signed int* _t36;
				signed int _t39;
				signed int _t40;
				signed int* _t41;
				signed int _t45;
				void* _t51;
				signed int _t52;
				signed int* _t54;
				void* _t56;
				signed int** _t57;

				_t57 = _t56 - 0x2c;
				_t54 = _a4;
				if(_t54 == 0) {
					return 0x16;
				} else {
					 *_t57 = 0x6db2a01c;
					E6DB23F90();
					_t40 =  *0x6db2c048;
					_t39 =  *0x6db2c04c;
					if(_t40 >= _t39) {
						L7:
						__eflags = _t40;
						if(_t40 == 0) {
							L12:
							__eflags = _t39 - 0x100000;
							if(__eflags == 0) {
								L16:
								 *_t57 = 0x6db2a01c;
								E6DB23EE0(_t40, _t55, __eflags);
								_t22 = 0xc;
								goto L6;
							} else {
								_t55 = _t39 + 1;
								_t51 =  ==  ? _t55 : _t39 + _t39;
								__eflags = _t51 - 0x100000;
								_t52 =  >  ? 0x100000 : _t51;
								_v56 = _t52 * 4;
								 *_t57 =  *0x6db2c01c;
								_t26 = realloc(??, ??);
								__eflags = _t26;
								if(__eflags == 0) {
									goto L16;
								} else {
									_t41 = _t26 + _t39 * 4;
									_v32 = _t26;
									 *_t57 = _t41;
									_v56 = 0;
									_v52 = _t52 - _t39 << 2;
									_v36 = _t41;
									memset(??, ??, ??);
									 *0x6db2c048 = _t55;
									 *0x6db2c04c = _t52;
									__eflags = _a8;
									_t33 =  !=  ? _a8 : 1;
									 *0x6db2c01c = _v32;
									 *_t54 = _t39;
									 *_v36 =  !=  ? _a8 : 1;
									 *_t57 = 0x6db2a01c;
									E6DB23EE0(_v36, _t55, _a8);
									__eflags = 0;
									return 0;
								}
							}
						} else {
							_t36 =  *0x6db2c01c;
							_t45 = 0;
							while(1) {
								__eflags =  *_t36;
								if(__eflags == 0) {
									break;
								}
								_t45 = _t45 + 1;
								_t36 =  &(_t36[1]);
								__eflags = _t40 - _t45;
								if(_t40 == _t45) {
									goto L12;
								} else {
									continue;
								}
								goto L17;
							}
							goto L5;
						}
					} else {
						_t45 = _t40;
						_t36 =  &(( *0x6db2c01c)[_t40]);
						while(1) {
							_t55 =  *_t36;
							if( *_t36 == 0) {
								break;
							}
							_t45 = _t45 + 1;
							_t36 =  &(_t36[1]);
							__eflags = _t45 - _t39;
							if(__eflags == 0) {
								goto L7;
							} else {
								continue;
							}
							goto L17;
						}
						L5:
						 *_t54 = _t45;
						_t48 =  !=  ? _a8 : 1;
						 *_t36 =  !=  ? _a8 : 1;
						 *_t57 = 0x6db2a01c;
						E6DB23EE0(_t40, _t55, _a8);
						_t22 = 0;
						L6:
						return _t22;
					}
				}
				L17:
			}

0x6db25414
0x6db25417
0x6db2541d
0x6db25574
0x6db25423
0x6db25423
0x6db2542a
0x6db2542f
0x6db25435
0x6db2543d
0x6db25490
0x6db25490
0x6db25492
0x6db254b8
0x6db254b8
0x6db254be
0x6db25575
0x6db25575
0x6db2557c
0x6db25581
0x00000000
0x6db254c4
0x6db254c6
0x6db254d0
0x6db254d3
0x6db254d9
0x6db254e3
0x6db254ec
0x6db254ef
0x6db254f4
0x6db254f6
0x00000000
0x6db254f8
0x6db254f8
0x6db254fb
0x6db25503
0x6db25509
0x6db25511
0x6db25515
0x6db25519
0x6db25526
0x6db25530
0x6db25536
0x6db2553d
0x6db25542
0x6db25548
0x6db2554a
0x6db2554c
0x6db25553
0x6db2555b
0x6db25561
0x6db25561
0x6db254f6
0x6db25494
0x6db25494
0x6db25499
0x6db254aa
0x6db254ac
0x6db254ae
0x00000000
0x00000000
0x6db254a0
0x6db254a3
0x6db254a6
0x6db254a8
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x6db254a8
0x00000000
0x6db254b0
0x6db2543f
0x6db25444
0x6db25446
0x6db2545a
0x6db2545a
0x6db2545e
0x00000000
0x00000000
0x6db25450
0x6db25453
0x6db25456
0x6db25458
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x6db25458
0x6db25460
0x6db25460
0x6db2546d
0x6db25472
0x6db25474
0x6db2547b
0x6db25480
0x6db25482
0x6db25489
0x6db25489
0x6db2543d
0x00000000

APIs

pthread_rwlock_wrlock.LIBWINPTHREAD-1 ref: 6DB2542A
pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6DB2547B

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_rwlock_unlockpthread_rwlock_wrlock
String ID:
API String ID: 2630845080-0
Opcode ID: 4b0716e221871017880ae75e0c3c9c26e98ca106a0ad1e24ef2c9e42430afe28
Instruction ID: 4acb65b587ebafc9cf22d65663b2a5b527aa87781a4f7304c269c069934df181
Opcode Fuzzy Hash: 4b0716e221871017880ae75e0c3c9c26e98ca106a0ad1e24ef2c9e42430afe28
Instruction Fuzzy Hash: D1416AB3A082418BDB10DF19C48077AB7F1EB89755F16842DE99D8730CE731D8458BA2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB21020 Relevance: 9.1, APIs: 6, Instructions: 108sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 6DB21057
_amsg_exit.MSVCRT ref: 6DB21085

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Sleep_amsg_exit
String ID:
API String ID: 1015461914-0
Opcode ID: 881a3b35746f76bfac7265f954863331dd36f22b0e0cc58b2ca9c1c32f9f8dd3
Instruction ID: 26de4af892afff244800e3e3dcf4542a3714bf320a3eb0366692a061987bdf65
Opcode Fuzzy Hash: 881a3b35746f76bfac7265f954863331dd36f22b0e0cc58b2ca9c1c32f9f8dd3
Instruction Fuzzy Hash: 4E416B73A082818BEB019F69C595B7B77B0FF46784F46892DD5598B20CD736C581CB83

Uniqueness

Uniqueness Score: -1.00%

Function 6DB264F0 Relevance: 9.1, APIs: 6, Instructions: 80
synchronizationCOMMON

Download Yara Rule

C-Code - Quality: 41%

			E6DB264F0(void* __ecx, void* __ebp, intOrPtr _a4, intOrPtr* _a8) {
				char _v16;
				char* _v40;
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr* _t19;
				intOrPtr _t21;
				int _t22;
				void* _t23;
				void* _t24;
				intOrPtr _t25;
				intOrPtr _t28;
				intOrPtr* _t38;
				void* _t39;
				intOrPtr _t44;
				signed int _t46;
				intOrPtr _t47;
				void* _t49;
				intOrPtr* _t50;

				_t39 = __ecx;
				_t50 = _t49 - 0x20;
				_t44 = _a4;
				 *_t50 = _t44;
				_t19 = E6DB24C20();
				if(_t19 == 0) {
					L16:
					return 3;
				} else {
					_t38 = _t19;
					_t21 =  *((intOrPtr*)(_t19 + 0x14));
					if(_t21 == 0) {
						goto L16;
					} else {
						 *_t50 = _t21;
						_v40 =  &_v16;
						_t22 = GetHandleInformation(??, ??);
						_t50 = _t50 - 8;
						if(_t22 == 0) {
							goto L16;
						} else {
							_t23 = 0x16;
							_t46 =  *(_t38 + 0x24) & 0x00000004;
							if(_t46 == 0) {
								_t24 = E6DB24AD0(_t38, _t39, _t44, _t46);
								if(_t24 != 0) {
									_t46 =  *(_t24 + 0xb4);
								}
								if(_t44 == _t46) {
									_t23 = 0x24;
								} else {
									_t25 =  *((intOrPtr*)(_t38 + 0x14));
									if( *((intOrPtr*)(_t38 + 0x68)) == 0 || _t25 - 1 <= 0xfffffffd) {
										_v40 = 0xffffffff;
										 *_t50 = _t25;
										WaitForSingleObject(??, ??);
										_t25 =  *((intOrPtr*)(_t38 + 0x14));
										_t50 = _t50 - 8;
									}
									 *_t50 = _t25;
									_t47 =  *0x6db2f184;
									CloseHandle(??);
									_t28 =  *((intOrPtr*)(_t38 + 0x18));
									_t50 = _t50 - 4;
									if(_t28 != 0) {
										 *_t50 = _t28;
										CloseHandle(??);
										_t50 = _t50 - 4;
									}
									 *((intOrPtr*)(_t38 + 0x18)) = 0;
									if(_a8 != 0) {
										 *_a8 =  *((intOrPtr*)(_t38 + 4));
									}
									_t17 = _t38 + 0x1c; // 0x1c
									 *_t50 = _t17;
									E6DB23470();
									_t18 = _t38 + 0x38; // 0x38
									E6DB24A20(_t18, _t38, _t44, _t47);
									E6DB24650(_t38);
									_t23 = 0;
								}
							}
							return _t23;
						}
					}
				}
			}

0x6db264f0
0x6db264f3
0x6db264f6
0x6db264fa
0x6db264fd
0x6db26504
0x6db265e0
0x6db265eb
0x6db2650a
0x6db2650a
0x6db2650c
0x6db26511
0x00000000
0x6db26517
0x6db2651b
0x6db2651e
0x6db26522
0x6db26528
0x6db2652d
0x00000000
0x6db26533
0x6db26536
0x6db2653b
0x6db2653e
0x6db26544
0x6db2654b
0x6db2654d
0x6db2654d
0x6db26555
0x6db265f0
0x6db2655b
0x6db2655e
0x6db26563
0x6db2656d
0x6db26575
0x6db26578
0x6db2657e
0x6db26581
0x6db26581
0x6db26584
0x6db26587
0x6db2658d
0x6db2658f
0x6db26592
0x6db26597
0x6db26599
0x6db2659c
0x6db2659e
0x6db2659e
0x6db265a5
0x6db265ae
0x6db265b7
0x6db265b7
0x6db265b9
0x6db265bc
0x6db265bf
0x6db265c4
0x6db265c7
0x6db265ce
0x6db265d3
0x6db265d3
0x6db26555
0x6db265db
0x6db265db
0x6db2652d
0x6db26511

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6DB264FD

Part of subcall function 6DB24C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C36
Part of subcall function 6DB24C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C4B

GetHandleInformation.KERNEL32 ref: 6DB26522

Part of subcall function 6DB24AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6DB25ADA,?,?,?,?,6DB26ADD), ref: 6DB24AED

WaitForSingleObject.KERNEL32 ref: 6DB26578
CloseHandle.KERNEL32 ref: 6DB2658D
CloseHandle.KERNEL32 ref: 6DB2659C
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB265BF

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Handle$Close$InformationObjectSingleValueWait__pth_gpointer_lockedpthread_mutex_destroypthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 3385087108-0
Opcode ID: dcc4af32b2c7756fa7225a647a935c6b705ecfbb321e54d6c13269a6e1283f5c
Instruction ID: b64d7bc4eb7565238ff1a34d2734b94c090397b0bcba70bd4955b2c0182905c3
Opcode Fuzzy Hash: dcc4af32b2c7756fa7225a647a935c6b705ecfbb321e54d6c13269a6e1283f5c
Instruction Fuzzy Hash: 00215E726082858BEB00EF39E98567A7BE4EF49210F014569ED58CB24DEB30D845CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23B20 Relevance: 9.1, APIs: 6, Instructions: 77
COMMON

Download Yara Rule

C-Code - Quality: 55%

			E6DB23B20(void* __eflags, intOrPtr* _a4) {
				void* _v16;
				intOrPtr* _t17;
				intOrPtr _t21;
				intOrPtr _t27;
				intOrPtr* _t32;
				intOrPtr* _t40;
				intOrPtr _t41;
				intOrPtr* _t49;
				void* _t50;
				intOrPtr* _t51;
				void* _t55;

				_t55 = __eflags;
				_t51 = _t50 - 0x24;
				 *_t51 = 0x6db2a00c;
				E6DB24310();
				_t17 = E6DB23620(_a4,  &_v16, _t55);
				 *_t51 = 0x6db2a00c;
				_t40 = _t17;
				E6DB24360();
				if(_t40 != 0) {
					L2:
					return _t40;
				} else {
					_t40 = _v16;
					if(_t40 != 0) {
						_t49 = _t40;
						_t21 = E6DB23710(_t40, __eflags);
						_t41 = _t21;
						__eflags = _t21;
						if(_t21 != 0) {
							L8:
							 *_a4 = _v16;
							return _t41;
						} else {
							__eflags =  *((intOrPtr*)(_t49 + 0xc)) -  *((intOrPtr*)(_t49 + 0x10));
							if( *((intOrPtr*)(_t49 + 0xc)) >  *((intOrPtr*)(_t49 + 0x10))) {
								L6:
								 *_a4 = _v16;
								_t27 = E6DB23760(_t49, 1);
								__eflags = _t27;
								_t43 =  ==  ? 0x10 : _t27;
								_t29 =  ==  ? 0x10 : _t27;
								return  ==  ? 0x10 : _t27;
							} else {
								__eflags =  *((intOrPtr*)(_t49 + 8));
								if( *((intOrPtr*)(_t49 + 8)) <= 0) {
									 *_t49 = 0xdeadb0ef;
									_t32 = E6DB23760(_t49, 0);
									_t40 = _t32;
									__eflags = _t32;
									if(_t32 == 0) {
										 *_t51 = _t49 + 0x1c;
										E6DB22340();
										 *_t51 = _t49 + 0x14;
										E6DB23470();
										 *_t51 = _t49 + 0x18;
										E6DB23470();
										 *_t49 = 0xdeadb0ef;
										 *_t51 = _v16;
										L6DB29400();
										goto L2;
									} else {
										goto L8;
									}
								} else {
									goto L6;
								}
							}
						}
					} else {
						goto L2;
					}
				}
			}

0x6db23b20
0x6db23b22
0x6db23b25
0x6db23b2c
0x6db23b39
0x6db23b3e
0x6db23b45
0x6db23b47
0x6db23b4e
0x6db23b58
0x6db23b5f
0x6db23b50
0x6db23b50
0x6db23b56
0x6db23b62
0x6db23b64
0x6db23b69
0x6db23b6b
0x6db23b6d
0x6db23bc5
0x6db23bcd
0x6db23bd6
0x6db23b6f
0x6db23b72
0x6db23b75
0x6db23b7e
0x6db23b8b
0x6db23b8f
0x6db23b94
0x6db23b9d
0x6db23ba3
0x6db23ba7
0x6db23b77
0x6db23b7a
0x6db23b7c
0x6db23bb0
0x6db23bba
0x6db23bbf
0x6db23bc1
0x6db23bc3
0x6db23be3
0x6db23be6
0x6db23bee
0x6db23bf1
0x6db23bf9
0x6db23bfc
0x6db23c05
0x6db23c0b
0x6db23c0e
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x6db23b7c
0x6db23b75
0x00000000
0x00000000
0x00000000
0x6db23b56

APIs

pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB23B2C

Part of subcall function 6DB23620: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,6DB23B3E), ref: 6DB23637
Part of subcall function 6DB23620: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,6DB23B3E), ref: 6DB2365F

pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB23B47

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 4077346669-0
Opcode ID: 033a96652790a893df885e337b34f6d0c7a6f3ee53952237897304e420288846
Instruction ID: a3385cfcb07c4914fef2f89070aa25132a99b097ab4ac8c14319e5b116c2006f
Opcode Fuzzy Hash: 033a96652790a893df885e337b34f6d0c7a6f3ee53952237897304e420288846
Instruction Fuzzy Hash: E3210AB670D7868BD710DF69E8C496AB3E4EB48218F01482DE999D7308E774D8858B52

Uniqueness

Uniqueness Score: -1.00%

Function 6DB22760 Relevance: 9.1, APIs: 6, Instructions: 77COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6DB2279B
RtlLeaveCriticalSection.NTDLL ref: 6DB227AB
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB227D8
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB227E8
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB227FF
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB2280C

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_getclean$CriticalSection$EnterLeavepthread_mutex_unlock
String ID:
API String ID: 83821921-0
Opcode ID: ab832233b8c1a2ff24323db83a143bfcec52f6e406346d1c188ec3b63c4d040a
Instruction ID: 5a7f0a747f8e68d77e4122bcfdcd1ac8685c71977847931d1beae9d3c90a27db
Opcode Fuzzy Hash: ab832233b8c1a2ff24323db83a143bfcec52f6e406346d1c188ec3b63c4d040a
Instruction Fuzzy Hash: 623126B29087818FD710EF29D58062EBBF0FF88714F414A2DE9999B258E734D945CF92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB21840 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

Part of subcall function 6DB214C0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,6DB21852), ref: 6DB214CE
Part of subcall function 6DB214C0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,6DB21852), ref: 6DB214F3

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB21868
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB2189F

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_lockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 967236581-0
Opcode ID: 9a8536c20706ae71b844ae5d558e9e781c944f6cf5ae49408594620819c87244
Instruction ID: d876ecb62b30a032ebd0dc4b9eacf5f02b64bc32d31683f0aad8d9d764edbf4b
Opcode Fuzzy Hash: 9a8536c20706ae71b844ae5d558e9e781c944f6cf5ae49408594620819c87244
Instruction Fuzzy Hash: 66214173A087458FD3109F3A948056BB7E5EF80398F09892DD98987708E632E4468B91

Uniqueness

Uniqueness Score: -1.00%

Function 6DB27110 Relevance: 9.1, APIs: 6, Instructions: 64COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 6DB271B3

Part of subcall function 6DB26A90: pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB26AB3

ReleaseSemaphore.KERNEL32 ref: 6DB27178
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6DB21910), ref: 6DB2718F
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,?,?,?,6DB21910), ref: 6DB271AE
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,6DB21910), ref: 6DB271E2
_errno.MSVCRT ref: 6DB271E7

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$_errno$ReleaseSemaphorepthread_mutex_lock
String ID:
API String ID: 1829004465-0
Opcode ID: da1a146ea9fa871e19cf3b15b9bff4bd5081e70841bca82bf27b2e416c0af268
Instruction ID: 657ccd154fcbbd766fe79f7d15e9d65041494bb663a0d5ccdab1d82f0e305df0
Opcode Fuzzy Hash: da1a146ea9fa871e19cf3b15b9bff4bd5081e70841bca82bf27b2e416c0af268
Instruction Fuzzy Hash: 65218472A083418FC704DF29C98972AB7F1AF89325F16C66CD8598B398E770D845CB45

Uniqueness

Uniqueness Score: -1.00%

Function 6DB27040 Relevance: 9.1, APIs: 6, Instructions: 52COMMON

Download Yara Rule

APIs

Part of subcall function 6DB26A90: pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB26AB3

ReleaseSemaphore.KERNEL32 ref: 6DB27092
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB270A9
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB270CC
_errno.MSVCRT ref: 6DB270D1
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB270F2
_errno.MSVCRT ref: 6DB270F7

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$_errno$ReleaseSemaphorepthread_mutex_lock
String ID:
API String ID: 1829004465-0
Opcode ID: e186e95b306c1b4bbbe2859c8b94d0ca3656f6e287120baffd5686be3ac76c91
Instruction ID: cbcd0926502423e0a9a30caa653b04ab89d3c264f39af0928dbc9067661edbe6
Opcode Fuzzy Hash: e186e95b306c1b4bbbe2859c8b94d0ca3656f6e287120baffd5686be3ac76c91
Instruction Fuzzy Hash: 161103726083418FC7009F75C58972AB7F1EF86314F15C61CE9698B399D771D8498B46

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25C20 Relevance: 9.0, APIs: 6, Instructions: 35
sleepCOMMON

Download Yara Rule

C-Code - Quality: 79%

			E6DB25C20(void* __ecx, void* __edi, void* __ebp, void* __eflags, intOrPtr _a4) {
				intOrPtr _v24;
				void* __ebx;
				void* __esi;
				void* _t4;
				intOrPtr _t9;
				void* _t13;
				intOrPtr _t17;
				void* _t19;
				intOrPtr* _t20;

				_t18 = __ebp;
				_t16 = __edi;
				_t15 = __ecx;
				_t20 = _t19 - 0x14;
				_t17 = _a4;
				_t4 = E6DB24AD0(_t13, __ecx, __edi, _t17);
				_t25 = _t17;
				if(_t17 == 0) {
					E6DB25AD0(__ecx, __edi, __ebp, __eflags);
					 *_t20 = 0;
					Sleep(??);
					E6DB25AD0(_t15, __edi, __ebp, __eflags);
					__eflags = 0;
					return 0;
				} else {
					E6DB25AD0(__ecx, __edi, __ebp, _t25);
					_t9 =  *((intOrPtr*)(_t4 + 0x18));
					_t26 = _t9;
					if(_t9 == 0) {
						 *_t20 = _t17;
						Sleep(??);
						_t20 = _t20 - 4;
					} else {
						_v24 = _t17;
						 *_t20 = _t9;
						E6DB22DC0();
					}
					E6DB25AD0(_t15, _t16, _t18, _t26);
					return 0;
				}
			}

0x6db25c20
0x6db25c20
0x6db25c20
0x6db25c22
0x6db25c25
0x6db25c29
0x6db25c2e
0x6db25c30
0x6db25c60
0x6db25c65
0x6db25c6c
0x6db25c75
0x6db25c7d
0x6db25c81
0x6db25c32
0x6db25c34
0x6db25c39
0x6db25c3c
0x6db25c3e
0x6db25c88
0x6db25c8b
0x6db25c91
0x6db25c40
0x6db25c40
0x6db25c44
0x6db25c47
0x6db25c47
0x6db25c4c
0x6db25c58
0x6db25c58

APIs

Part of subcall function 6DB24AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6DB25ADA,?,?,?,?,6DB26ADD), ref: 6DB24AED

pthread_testcancel.LIBWINPTHREAD-1 ref: 6DB25C34
pthread_testcancel.LIBWINPTHREAD-1 ref: 6DB25C4C
pthread_testcancel.LIBWINPTHREAD-1 ref: 6DB25C60
Sleep.KERNEL32 ref: 6DB25C6C
pthread_testcancel.LIBWINPTHREAD-1 ref: 6DB25C75
Sleep.KERNEL32 ref: 6DB25C8B

Part of subcall function 6DB22DC0: WaitForSingleObject.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00000000,00000002,00000001,?,6DB23036), ref: 6DB22E1E

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_testcancel$Sleep$ObjectSingleValueWait
String ID:
API String ID: 3679766023-0
Opcode ID: 394fd77f470c96b85975ac6bbcc459387afcc04a7283a6bf3d722dca90dcbdbd
Instruction ID: 0af8d5f83ce8815762272f4b10bdd7655aa75c2b03af5299503e5107ca57e5c6
Opcode Fuzzy Hash: 394fd77f470c96b85975ac6bbcc459387afcc04a7283a6bf3d722dca90dcbdbd
Instruction Fuzzy Hash: 8BF0B4B380D1504FD7007B78B58613F3AE0FF06218F430924E54AA324DFB20C80086D7

Uniqueness

Uniqueness Score: -1.00%

Function 6DB22F90 Relevance: 7.6, APIs: 5, Instructions: 108threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6DB22FD0

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CurrentThread
String ID:
API String ID: 2882836952-0
Opcode ID: 1d1f97bc6f24c23c635683d367f85ba0ec8bdf3d9d1401ec86f57c68c005098b
Instruction ID: ff9f109b06ce93c326c352d5fe23bb0135c29b65f8f8d4c329b7ed8aeb1b3c45
Opcode Fuzzy Hash: 1d1f97bc6f24c23c635683d367f85ba0ec8bdf3d9d1401ec86f57c68c005098b
Instruction Fuzzy Hash: B3318B33B042428BEB116E69C98473BB7A0EB85325F54857DE94CCF34DEB36C8418BA1

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23F90 Relevance: 7.6, APIs: 5, Instructions: 84
COMMON

Download Yara Rule

C-Code - Quality: 68%

			E6DB23F90(intOrPtr* _a4) {
				intOrPtr _v32;
				intOrPtr _v36;
				char _v40;
				signed int _v48;
				intOrPtr _v72;
				void* __ebx;
				void* __esi;
				void* _t26;
				signed int _t28;
				signed int _t31;
				signed int _t38;
				intOrPtr _t44;
				signed int _t45;
				signed int _t52;
				intOrPtr* _t53;
				intOrPtr _t54;
				intOrPtr* _t55;

				_t53 = _a4;
				_t26 = E6DB23AC0(_t53);
				if(_t26 == 0) {
					_t44 =  *_t53;
					_t28 = E6DB23710(_t44, __eflags);
					_t52 = _t28;
					__eflags = _t28;
					if(_t28 == 0) {
						__eflags =  *(_t44 + 8);
						if( *(_t44 + 8) != 0) {
							L7:
							asm("lock add dword [ebx+0x8], 0x1");
						} else {
							_t45 =  *(_t44 + 0x10);
							_t31 =  *(_t44 + 0xc);
							__eflags = _t45;
							if(_t45 > 0) {
								_t31 = _t31 - _t45;
								__eflags = _t31;
								 *(_t44 + 0x10) = 0;
								 *(_t44 + 0xc) = _t31;
							}
							__eflags = _t31;
							if(__eflags > 0) {
								_v40 = 0x6db237b0;
								_t54 = _t44 + 0x18;
								 *(_t44 + 0x10) =  ~_t31;
								_v36 = _t44;
								_v32 =  *((intOrPtr*)(E6DB25870(__eflags)));
								asm("lock or dword [esp], 0x0");
								 *((intOrPtr*)(E6DB25870(__eflags))) =  &_v40;
								asm("lock or dword [esp], 0x0");
								_v48 = _t44 + 0x1c;
								while(1) {
									_v72 = _t54;
									 *_t55 = _v48;
									_t38 = E6DB22760();
									__eflags = _t38;
									if(__eflags != 0) {
										break;
									}
									__eflags =  *(_t44 + 0x10);
									if(__eflags >= 0) {
										 *((intOrPtr*)(E6DB25870(__eflags))) = _v32;
										 *(_t44 + 0xc) = 0;
										goto L7;
									} else {
										continue;
									}
									goto L8;
								}
								_v48 = _t38;
								 *((intOrPtr*)(E6DB25870(__eflags))) = _v32;
								 *_t55 = _v36;
								_v40();
								_t52 = _v48;
							} else {
								goto L7;
							}
						}
					}
					L8:
					return E6DB237D0(_t53, _t44, _t52, _t53);
				} else {
					return _t26;
				}
			}

0x6db23f97
0x6db23f9d
0x6db23fa4
0x6db23fb0
0x6db23fb4
0x6db23fb9
0x6db23fbb
0x6db23fbd
0x6db23fc2
0x6db23fc4
0x6db23fe0
0x6db23fe0
0x6db23fc6
0x6db23fc6
0x6db23fc9
0x6db23fcc
0x6db23fce
0x6db23fd0
0x6db23fd0
0x6db23fd2
0x6db23fd9
0x6db23fd9
0x6db23fdc
0x6db23fde
0x6db24002
0x6db2400a
0x6db2400d
0x6db24010
0x6db2401b
0x6db2401f
0x6db2402d
0x6db24032
0x6db24037
0x6db24047
0x6db2404b
0x6db2404f
0x6db24052
0x6db24057
0x6db24059
0x00000000
0x00000000
0x6db24043
0x6db24045
0x6db24089
0x6db2408b
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x6db24045
0x6db2405b
0x6db24068
0x6db2406e
0x6db24071
0x6db24079
0x00000000
0x00000000
0x00000000
0x6db23fde
0x6db23fc4
0x6db23fe5
0x6db23ff5
0x6db23fad
0x6db23fad
0x6db23fad

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 4077346669-0
Opcode ID: f0597f896adf174cde6527d4aa150e0abeb41783bd5572558f9c8def4c8f8976
Instruction ID: b623bc2588ac4d630d66ee57f999bd9b5fe650be742badc8f18ba79e9757ab51
Opcode Fuzzy Hash: f0597f896adf174cde6527d4aa150e0abeb41783bd5572558f9c8def4c8f8976
Instruction Fuzzy Hash: BF313676A083428FD704DF26D480A2BB7E4AF88358F01896DE88D9B318EB34D9058F91

Uniqueness

Uniqueness Score: -1.00%

Function 6DB268A0 Relevance: 7.6, APIs: 5, Instructions: 82COMMON

Download Yara Rule

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1 ref: 6DB268BF

Part of subcall function 6DB24C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C36
Part of subcall function 6DB24C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C4B

_mbsdup.MSVCRT ref: 6DB26901
??3@YAXPAX@Z.MSVCRT ref: 6DB2691A
IsDebuggerPresent.KERNEL32 ref: 6DB2693D
RaiseException.KERNEL32 ref: 6DB2696F

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ??3@DebuggerExceptionPresentRaise__pth_gpointer_locked_mbsduppthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 2070848239-0
Opcode ID: f8d9e4303870f32b3786f4291e20836a71c7eff7967244fb5f1a28888f70cf14
Instruction ID: 45812e4a6452b59465bf32a412584f90fe5bb2a3a08953d52c730da57036a67f
Opcode Fuzzy Hash: f8d9e4303870f32b3786f4291e20836a71c7eff7967244fb5f1a28888f70cf14
Instruction Fuzzy Hash: 31217C72A083928BD7019F6AD54473ABBF4EB88365F414579E98CCB348DB35C840CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB21A20 Relevance: 7.6, APIs: 5, Instructions: 74COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6DB21A37
ReleaseSemaphore.KERNEL32 ref: 6DB21A8E
RtlLeaveCriticalSection.NTDLL ref: 6DB21A9E
RtlLeaveCriticalSection.NTDLL ref: 6DB21ABB
RtlLeaveCriticalSection.NTDLL ref: 6DB21AE4

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CriticalSection$Leave$EnterReleaseSemaphore
String ID:
API String ID: 2813224205-0
Opcode ID: eff45adff3d80fe5bf6ced816c8f5aeab3832876cea6f11f6425713b7af46c77
Instruction ID: df5b1d65d70ecf3a419deaea5d812a66a538a782ea35d6f9f1d11e633de3599e
Opcode Fuzzy Hash: eff45adff3d80fe5bf6ced816c8f5aeab3832876cea6f11f6425713b7af46c77
Instruction Fuzzy Hash: B6214FB26093058FD704AF3EE48572EBBF4FB89212F45093EE95AC3344D631D9488B52

Uniqueness

Uniqueness Score: -1.00%

Function 6DB26DE0 Relevance: 7.6, APIs: 5, Instructions: 68COMMON

Download Yara Rule

APIs

Part of subcall function 6DB26A90: pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB26AB3

pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB26E31
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26E58
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26E68
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26E94
_errno.MSVCRT ref: 6DB26EC7

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_getclean$_errnopthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 84148830-0
Opcode ID: e11a19543f0cc64dd9b552b1d6ba80058ff4d5a72192f16997fbfa01fe93cc89
Instruction ID: 825a2d7d0ae4c224f29db33326bb91541b2e9a4cdc45043297a5b2242153f40e
Opcode Fuzzy Hash: e11a19543f0cc64dd9b552b1d6ba80058ff4d5a72192f16997fbfa01fe93cc89
Instruction Fuzzy Hash: B9212B765083418FD300EF28C54462EBBE4EF89768F414A5DE8A8AB368D774D9458FD3

Uniqueness

Uniqueness Score: -1.00%

Function 6DB29470 Relevance: 7.6, APIs: 5, Instructions: 61COMMON

Download Yara Rule

APIs

_lock.MSVCRT ref: 6DB29489
_unlock.MSVCRT ref: 6DB294B1
calloc.MSVCRT ref: 6DB294FF

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: _lock_unlockcalloc
String ID:
API String ID: 3876498383-0
Opcode ID: bc7c9211e11e7378f5e61e8f68fd5fd2ba33df29a14fefb0ae377ceaa0f091f3
Instruction ID: 444fb4dd8400eb81b17b3133bcb85a0777fd136c165ca1be498816acce430d10
Opcode Fuzzy Hash: bc7c9211e11e7378f5e61e8f68fd5fd2ba33df29a14fefb0ae377ceaa0f091f3
Instruction Fuzzy Hash: B6215C72648242CBDB11DF28C49066A7BE0FF85714F15C669D5AC8B38DEB74D400CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB27DA0 Relevance: 7.6, APIs: 5, Instructions: 55timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 6DB27DDF
GetCurrentProcessId.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6DB213E5), ref: 6DB27DF0
GetCurrentThreadId.KERNEL32 ref: 6DB27DF8
GetTickCount.KERNEL32 ref: 6DB27E00
QueryPerformanceCounter.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6DB213E5), ref: 6DB27E0F

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CurrentTime$CountCounterFilePerformanceProcessQuerySystemThreadTick
String ID:
API String ID: 1445889803-0
Opcode ID: 98536a3e6542a6a1b83d453e1fa67f86ef32efc3fa117e232daf7ac9afd9d7f6
Instruction ID: ddb0b7520818c45d49559ab77322895d2fcff55165174713697a692832cf91e4
Opcode Fuzzy Hash: 98536a3e6542a6a1b83d453e1fa67f86ef32efc3fa117e232daf7ac9afd9d7f6
Instruction Fuzzy Hash: F21173B69043018FCB10DF7AD58966BBBF5FB89265F424C39E449C7204EB35D449CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24D88 Relevance: 7.6, APIs: 5, Instructions: 55
COMMON

Download Yara Rule

C-Code - Quality: 83%

			E6DB24D88(void* __eax, void* __ecx, void* __edi, void* __ebp, intOrPtr _a4) {

				if(__eax == 1) {
					_a4 = E6DB24370;
					 *__esp = 1; // executed
					__eax =  *0x6db2f180(); // executed
					__esp = __esp - 8;
					 *0x6db2c02c = __eax;
					__eax = 1;
					__esp =  &(__esp[4]);
					_pop(__ebx);
					_pop(__esi);
					_pop(__edi);
					return 1;
				} else {
					if(__eax == 3) {
						__eax =  *0x6db2a020;
						if(__eax != 0xffffffff) {
							__eax = TlsGetValue(__eax);
							__esp = __esp - 4;
							__ebx = __eax;
							if(__eax != 0) {
								if(( *(__eax + 0x20) & 0x00000030) == 0) {
									__eax =  *(__eax + 0x18);
									if( *(__ebx + 0x68) != 0) {
										if(__eax != 0) {
											__eax = CloseHandle(__eax);
											__esp = __esp - 4;
										}
										_t25 = __ebx + 0x1c; // 0x1c
										__eax = _t25;
										 *(__ebx + 0x18) = 0;
										__eax = E6DB23470(_t25);
										_t27 = __ebx + 0x38; // 0x38
										_t27 = E6DB24A20(_t27, __ebx, __edi, __esi);
									} else {
										if(__eax != 0) {
											__eax = CloseHandle(__eax);
											__esp = __esp - 4;
										}
										__eax =  *(__ebx + 0xb4);
										 *(__ebx + 0x18) = 0;
										 *(__ebx + 0x68) = 1;
										if(__eax != 0) {
											__eax = E6DB24C60(__eax);
										}
										_t18 = __ebx + 0x1c; // 0x1c
										__edi = _t18;
										_t19 = __ebx + 0x38; // 0x38
										__esi = _t19;
										if(( *(__ebx + 0x24) & 0x00000004) == 0) {
											__eax = E6DB23470(__edi);
											__esi = E6DB24A20(__esi, __ebx, __edi, __esi);
										} else {
											__eax =  *(__ebx + 0x14);
											 *__ebx = 0xdeadbeef;
											if(__eax != 0) {
												__eax = CloseHandle(__eax);
												__esp = __esp - 4;
											}
											 *(__ebx + 0x14) = 0;
											__eax = E6DB23470(__edi);
											__eax = __esi;
											goto L14;
										}
									}
								} else {
									__eax =  *(__eax + 0xb4);
									if(__eax != 0) {
										__eax = E6DB24C60(__eax);
									}
									__eax =  *(__ebx + 0x14);
									if(__eax != 0) {
										 *__esp = __eax;
										__esi =  *0x6db2f184;
										__eax = CloseHandle(??);
										__eax =  *(__ebx + 0x18);
										__esp = __esp - 4;
										if(__eax != 0) {
											__eax = CloseHandle(__eax);
											__esp = __esp - 4;
										}
										 *(__ebx + 0x18) = 0;
										 *(__ebx + 0x14) = 0;
									}
									_t9 = __ebx + 0x1c; // 0x1c
									_t9 = E6DB23470(_t9);
									_t10 = __ebx + 0x38; // 0x38
									__eax = _t10;
									L14:
									__eax = E6DB24A20(__eax, __ebx, __edi, __esi);
									__ebx = E6DB24650(__ebx);
									 *0x6db2a020 = TlsSetValue( *0x6db2a020, 0);
									__esp = __esp - 8;
								}
							}
						}
					}
					return 1;
				}
			}

0x6db24d93
0x6db24e70
0x6db24e78
0x6db24e7f
0x6db24e85
0x6db24e88
0x6db24e8d
0x6db24e92
0x6db24e95
0x6db24e96
0x6db24e97
0x6db24e98
0x6db24d99
0x6db24d9c
0x6db24d9e
0x6db24da6
0x6db24dab
0x6db24db1
0x6db24db4
0x6db24db8
0x6db24dbe
0x6db24ea3
0x6db24ea8
0x6db24f1a
0x6db24f1f
0x6db24f25
0x6db24f25
0x6db24f28
0x6db24f28
0x6db24f2b
0x6db24f35
0x6db24f3a
0x6db24f3d
0x6db24eaa
0x6db24eac
0x6db24eb1
0x6db24eb7
0x6db24eb7
0x6db24eba
0x6db24ec0
0x6db24ec7
0x6db24ed0
0x6db24ed2
0x6db24ed2
0x6db24ed7
0x6db24ed7
0x6db24eda
0x6db24eda
0x6db24ee1
0x6db24f53
0x6db24f5a
0x6db24ee3
0x6db24ee3
0x6db24ee6
0x6db24eee
0x6db24ef3
0x6db24ef9
0x6db24ef9
0x6db24efc
0x6db24f06
0x6db24f0b
0x00000000
0x6db24f0b
0x6db24ee1
0x6db24dc4
0x6db24dc4
0x6db24dcc
0x6db24dce
0x6db24dce
0x6db24dd3
0x6db24dd8
0x6db24dda
0x6db24ddd
0x6db24de3
0x6db24de5
0x6db24de8
0x6db24ded
0x6db24df2
0x6db24df4
0x6db24df4
0x6db24df7
0x6db24dfe
0x6db24dfe
0x6db24e05
0x6db24e0b
0x6db24e10
0x6db24e10
0x6db24e13
0x6db24e13
0x6db24e1a
0x6db24e2f
0x6db24e35
0x6db24e35
0x6db24dbe
0x6db24db8
0x6db24da6
0x6db24d85
0x6db24d85

APIs

TlsGetValue.KERNEL32 ref: 6DB24DAB
CloseHandle.KERNEL32 ref: 6DB24DE3
CloseHandle.KERNEL32 ref: 6DB24DF2
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB24E0B

Part of subcall function 6DB24C60: __pth_gpointer_locked.LIBWINPTHREAD-1(?,?,?,?,?,?,00000000,?,?,?,6DB258D2,?,?,?,0000001C,6DB25A6F), ref: 6DB24C6A
Part of subcall function 6DB24C60: pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB24C8B
Part of subcall function 6DB24C60: pthread_rwlock_rdlock.LIBWINPTHREAD-1 ref: 6DB24CCE
Part of subcall function 6DB24C60: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB24CF2
Part of subcall function 6DB24C60: pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB24D05
Part of subcall function 6DB24C60: pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6DB24D1C
Part of subcall function 6DB24C60: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB24D29

TlsSetValue.KERNEL32 ref: 6DB24E2F
RtlAddVectoredExceptionHandler.NTDLL ref: 6DB24E7F
CloseHandle.KERNEL32 ref: 6DB24EB1
CloseHandle.KERNEL32 ref: 6DB24EF3
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB24F06

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CloseHandle$Valuepthread_mutex_destroypthread_spin_lockpthread_spin_unlock$ExceptionHandlerVectored__pth_gpointer_lockedpthread_rwlock_rdlockpthread_rwlock_unlock
String ID:
API String ID: 4009224233-0
Opcode ID: 97d6ef74cbab4e0e67fd1969d4ba919e19c9a9248bda94760396427721b55938
Instruction ID: 3f693218e052513c62d93566dc61f4e36aebcd1e922e3949a45d31ccf6bd7fc8
Opcode Fuzzy Hash: 97d6ef74cbab4e0e67fd1969d4ba919e19c9a9248bda94760396427721b55938
Instruction Fuzzy Hash: 5311BF726042818BEB00EF39D98473A7BF4EF19350F020568D869CB64DDB38D854CB82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24771 Relevance: 7.6, APIs: 5, Instructions: 51
COMMON

Download Yara Rule

C-Code - Quality: 28%

			E6DB24771(void* __eax, void** __ebx, void* __edi, void* __ebp, void* _a4, signed int _a8, void* _a28) {
				void* _t17;
				void* _t18;
				void* _t19;
				void** _t22;
				void** _t24;
				void** _t39;
				void** _t40;

				_t24 = __ebx;
				__eax = __eax + 1;
				if(__ebp > __eax) {
					__ebp = __ebp - __eax;
					__edx = __eax * 8;
					__eax = __ebp * 8;
					_a8 = __ebp * 8;
					__eax = __edi + __edx;
					_a4 = __edi + __edx;
					__eax = __edi + __edx - 8;
					 *__esp = __edi + __edx - 8;
					__eax = memmove(??, ??, ??);
				}
				__eax = _a28;
				 *0x6db2c038 = __eax;
				if(__eax == 0) {
					 *__esp = __edi;
					L6DB29400();
					 *0x6db2c034 = 0;
					 *0x6db2c038 = 0;
				}
				_t17 = _t24[0xb];
				if(_t17 != 0) {
					 *_t39 = _t17;
					L6DB29400();
				}
				_t18 = _t24[0xc];
				if(_t18 != 0) {
					 *_t39 = _t18;
					L6DB29400();
				}
				_t19 = _t24[0xd];
				if(_t19 != 0) {
					 *_t39 = _t19;
					L6DB29400();
				}
				_t4 =  &(_t24[1]); // 0x4
				 *_t24 = 0;
				_t24[0x2d] = 0;
				memset(_t4 & 0xfffffffc, 0, _t24 - (_t4 & 0xfffffffc) + 0xb8 >> 2 << 2);
				_t40 =  &(_t39[3]);
				_t22 =  *0x6db2c040;
				if(_t22 == 0) {
					 *0x6db2c040 = _t24;
					 *0x6db2c044 = _t24;
				} else {
					_t22[0x2c] = _t24;
					 *0x6db2c040 = _t24;
				}
				 *_t40 = 0x6db2a018;
				return E6DB232E0();
			}

0x6db24771
0x6db24778
0x6db2477d
0x6db247b1
0x6db247b3
0x6db247ba
0x6db247c1
0x6db247c5
0x6db247c8
0x6db247cc
0x6db247d0
0x6db247d3
0x6db247d3
0x6db2477f
0x6db24783
0x6db2478a
0x6db24790
0x6db24793
0x6db24798
0x6db247a2
0x6db247a2
0x6db24692
0x6db24697
0x6db24699
0x6db2469c
0x6db2469c
0x6db246a1
0x6db246a6
0x6db246a8
0x6db246ab
0x6db246ab
0x6db246b0
0x6db246b5
0x6db246b7
0x6db246ba
0x6db246ba
0x6db246bf
0x6db246c6
0x6db246cc
0x6db246e4
0x6db246e4
0x6db246e6
0x6db246ed
0x6db24760
0x6db24766
0x6db246ef
0x6db246ef
0x6db246f5
0x6db246f5
0x6db246fb
0x6db2470e

APIs

??3@YAXPAX@Z.MSVCRT ref: 6DB2469C
??3@YAXPAX@Z.MSVCRT ref: 6DB246AB
??3@YAXPAX@Z.MSVCRT ref: 6DB246BA
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,00000000,?,?,?,6DB25959,?,?,?,?,?,0000001C,6DB25A6F), ref: 6DB24702
??3@YAXPAX@Z.MSVCRT ref: 6DB24793
memmove.MSVCRT ref: 6DB247D3

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ??3@$memmovepthread_mutex_unlock
String ID:
API String ID: 885880168-0
Opcode ID: e7df67a9d1132a77419798340fa72d8e2b20916f04dfa8d71a592976bed7a57c
Instruction ID: 0a37ddf7164448585161e680e7c0bf0ce9e98a2153af70e091e92176cec7d882
Opcode Fuzzy Hash: e7df67a9d1132a77419798340fa72d8e2b20916f04dfa8d71a592976bed7a57c
Instruction Fuzzy Hash: 311136B32086418BEB11AF28C49037A7BF1FB44348F02456DC99D9B64CD774D044CB82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24CA7 Relevance: 7.5, APIs: 5, Instructions: 45COMMON

Download Yara Rule

APIs

pthread_rwlock_rdlock.LIBWINPTHREAD-1 ref: 6DB24CCE
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB24CF2
pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB24D05
pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6DB24D1C
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB24D29

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_spin_unlock$pthread_rwlock_rdlockpthread_rwlock_unlockpthread_spin_lock
String ID:
API String ID: 1248696315-0
Opcode ID: b66ba8eb16765528391e4c691996edc3770a8c34c0783c6c52b5ccdce8605290
Instruction ID: 4db7ac763405dcfaf442d4711037331bfee933a9d2014e5e47d13517e9576500
Opcode Fuzzy Hash: b66ba8eb16765528391e4c691996edc3770a8c34c0783c6c52b5ccdce8605290
Instruction Fuzzy Hash: 0C1145729086898FC710AF29D480A3ABBB0FF19314F06081DD5895BF59CB36A9908F92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB26A90 Relevance: 7.5, APIs: 5, Instructions: 45COMMON

Download Yara Rule

APIs

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB26AB3
pthread_testcancel.LIBWINPTHREAD-1 ref: 6DB26AD8

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_lockpthread_testcancel
String ID:
API String ID: 78788923-0
Opcode ID: 19e32eeafea7f237cda95f51a4dd484a47db3f4855e2adcb86590037abe611cb
Instruction ID: 64654cdfb7b4fc2a8c9483096dc6884dbfdfad59d7fbda4fb4574d786e3b00fd
Opcode Fuzzy Hash: 19e32eeafea7f237cda95f51a4dd484a47db3f4855e2adcb86590037abe611cb
Instruction Fuzzy Hash: B60162772083968FD704AF6A848023A77E4FF47328B16C679ED698729CE770C80587D2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24673 Relevance: 7.5, APIs: 5, Instructions: 45
COMMON

Download Yara Rule

C-Code - Quality: 21%

			E6DB24673(intOrPtr* __ebx, void* __eflags) {
				intOrPtr _t26;
				intOrPtr _t27;
				intOrPtr _t28;
				intOrPtr _t31;
				intOrPtr _t33;
				signed int _t35;
				signed int _t36;
				intOrPtr _t41;
				intOrPtr* _t42;
				intOrPtr _t49;
				int _t50;
				signed int _t51;
				intOrPtr _t56;
				intOrPtr _t57;
				intOrPtr _t59;
				intOrPtr* _t62;
				intOrPtr* _t63;

				_t42 = __ebx;
				 *_t62 = 0x6db2a018;
				E6DB22F90();
				_t57 =  *((intOrPtr*)(__ebx + 0xb4));
				if(_t57 != 0) {
					_t59 =  *0x6db2c038;
					__eflags = _t59;
					if(_t59 == 0) {
						goto L2;
					}
					_t33 = _t59 - 1;
					_t56 =  *0x6db2c03c;
					_t50 = 0;
					 *((intOrPtr*)(_t62 + 0x1c)) = _t33;
					_t49 = _t33;
					while(1) {
						_t35 = _t50 + _t49 >> 1;
						__eflags = _t57 -  *((intOrPtr*)(_t56 + 4 + _t35 * 8));
						if(__eflags == 0) {
							break;
						}
						if(__eflags < 0) {
							__eflags = _t35 - _t50;
							if(_t35 == _t50) {
								goto L2;
							}
							_t49 = _t35 - 1;
							L15:
							__eflags = _t49 - _t50;
							if(_t49 < _t50) {
								goto L2;
							}
							continue;
						}
						_t50 = _t35 + 1;
						goto L15;
					}
					_t36 = _t35 + 1;
					__eflags = _t59 - _t36;
					if(_t59 > _t36) {
						_t51 = _t36 * 8;
						 *(_t62 + 8) = (_t59 - _t36) * 8;
						 *((intOrPtr*)(_t62 + 4)) = _t56 + _t51;
						 *_t62 = _t56 + _t51 - 8;
						memmove(??, ??, ??);
					}
					_t41 =  *((intOrPtr*)(_t62 + 0x1c));
					 *0x6db2c038 = _t41;
					__eflags = _t41;
					if(_t41 == 0) {
						 *_t62 = _t56;
						L6DB29400();
						 *0x6db2c034 = 0;
						 *0x6db2c038 = 0;
					}
					goto L2;
				} else {
					L2:
					_t26 =  *((intOrPtr*)(_t42 + 0x2c));
					if(_t26 != 0) {
						 *_t62 = _t26;
						L6DB29400();
					}
					_t27 =  *((intOrPtr*)(_t42 + 0x30));
					if(_t27 != 0) {
						 *_t62 = _t27;
						L6DB29400();
					}
					_t28 =  *((intOrPtr*)(_t42 + 0x34));
					if(_t28 != 0) {
						 *_t62 = _t28;
						L6DB29400();
					}
					_t5 = _t42 + 4; // 0x4
					 *_t42 = 0;
					 *((intOrPtr*)(_t42 + 0xb4)) = 0;
					memset(_t5 & 0xfffffffc, 0, _t42 - (_t5 & 0xfffffffc) + 0xb8 >> 2 << 2);
					_t63 = _t62 + 0xc;
					_t31 =  *0x6db2c040;
					if(_t31 == 0) {
						 *0x6db2c040 = _t42;
						 *0x6db2c044 = _t42;
					} else {
						 *((intOrPtr*)(_t31 + 0xb0)) = _t42;
						 *0x6db2c040 = _t42;
					}
					 *_t63 = 0x6db2a018;
					return E6DB232E0();
				}
			}

0x6db24673
0x6db24678
0x6db2467f
0x6db24684
0x6db2468c
0x6db24710
0x6db24716
0x6db24718
0x00000000
0x00000000
0x6db2471e
0x6db24721
0x6db24727
0x6db24729
0x6db2472d
0x6db2474b
0x6db2474e
0x6db24750
0x6db24754
0x00000000
0x00000000
0x6db24756
0x6db24738
0x6db2473a
0x00000000
0x00000000
0x6db24740
0x6db24743
0x6db24743
0x6db24745
0x00000000
0x00000000
0x00000000
0x6db24745
0x6db24758
0x00000000
0x6db24758
0x6db24778
0x6db2477b
0x6db2477d
0x6db247b3
0x6db247c1
0x6db247c8
0x6db247d0
0x6db247d3
0x6db247d3
0x6db2477f
0x6db24783
0x6db24788
0x6db2478a
0x6db24790
0x6db24793
0x6db24798
0x6db247a2
0x6db247a2
0x00000000
0x6db24692
0x6db24692
0x6db24692
0x6db24697
0x6db24699
0x6db2469c
0x6db2469c
0x6db246a1
0x6db246a6
0x6db246a8
0x6db246ab
0x6db246ab
0x6db246b0
0x6db246b5
0x6db246b7
0x6db246ba
0x6db246ba
0x6db246bf
0x6db246c6
0x6db246cc
0x6db246e4
0x6db246e4
0x6db246e6
0x6db246ed
0x6db24760
0x6db24766
0x6db246ef
0x6db246ef
0x6db246f5
0x6db246f5
0x6db246fb
0x6db2470e
0x6db2470e

APIs

pthread_mutex_lock.LIBWINPTHREAD-1(?,?,?,?,00000000,?,?,?,6DB25959,?,?,?,?,?,0000001C,6DB25A6F), ref: 6DB2467F
??3@YAXPAX@Z.MSVCRT ref: 6DB2469C
??3@YAXPAX@Z.MSVCRT ref: 6DB246AB
??3@YAXPAX@Z.MSVCRT ref: 6DB246BA
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,00000000,?,?,?,6DB25959,?,?,?,?,?,0000001C,6DB25A6F), ref: 6DB24702

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ??3@$pthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 4211330938-0
Opcode ID: cdaa4e914405ead1af864ee0783b780587324d7f7817560efa5255d34ec07c35
Instruction ID: c6b6b4f4c4f8d7d27dcf42a0d2bdac5094a30ec8fcc7fe68506373929373c92b
Opcode Fuzzy Hash: cdaa4e914405ead1af864ee0783b780587324d7f7817560efa5255d34ec07c35
Instruction Fuzzy Hash: B10129736046808BEF20AF29D48077B77E5FB45718F02056CC99DAB64DD730E504CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB27260 Relevance: 7.5, APIs: 5, Instructions: 45COMMON

Download Yara Rule

APIs

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB27283
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB272A0
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB272B2
_errno.MSVCRT ref: 6DB272B7
_errno.MSVCRT ref: 6DB272CA

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: _errnopthread_mutex_unlock$pthread_mutex_lock
String ID:
API String ID: 1880327674-0
Opcode ID: d6c3d3d30795ba66c373dc4d8f4a77c3225d5b8465e8f842e8fbea9f295e0e57
Instruction ID: d68ed5f5198ea1de1cb7201252568f17110f467e73a28da3d6c356e40f8620b6
Opcode Fuzzy Hash: d6c3d3d30795ba66c373dc4d8f4a77c3225d5b8465e8f842e8fbea9f295e0e57
Instruction Fuzzy Hash: 5B0171366087868FD311AF6A844063AB7B4FF8B324B12461DFCAC8734CD770D8008765

Uniqueness

Uniqueness Score: -1.00%

Function 6DB264C1 Relevance: 7.5, APIs: 5, Instructions: 44
threadsleepCOMMON

Download Yara Rule

C-Code - Quality: 27%

			E6DB264C1(intOrPtr* __ebx, void* __ecx, intOrPtr* __edi, intOrPtr __esi, void* __ebp, void* __eflags, intOrPtr _a4, signed int _a8, intOrPtr* _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr* _a64) {
				intOrPtr _t23;
				intOrPtr _t25;
				intOrPtr _t36;
				intOrPtr* _t45;
				intOrPtr _t49;
				intOrPtr* _t50;
				intOrPtr _t54;
				intOrPtr* _t60;
				intOrPtr* _t62;
				intOrPtr* _t63;
				intOrPtr* _t64;
				intOrPtr* _t65;

				_t50 = __edi;
				_t45 = __ebx;
				__eax = E6DB24AD0(__ebx, __ecx, __edi, __esi);
				 *((intOrPtr*)(__edi + 0x6c)) = __eax;
				_a4 = __esi;
				_a20 = 0;
				_a16 = 4;
				_a12 = __edi;
				_a8 = E6DB24F70;
				 *_t60 = 0;
				_t23 =  *0x6db2f25c();
				_t54 = _t23;
				if(_t23 - 1 > 0xfffffffd) {
					_t25 =  *((intOrPtr*)(__edi + 0x18));
					if(_t25 != 0) {
						 *_t60 = _t25;
						CloseHandle(??);
						_t60 = _t60 - 4;
					}
					_t16 = _t50 + 0x1c; // 0x1c
					 *_t60 = _t16;
					E6DB23470();
					E6DB24A20(_t45, _t45, _t50, _t54);
					 *((intOrPtr*)(_t50 + 0x18)) = 0;
					 *((intOrPtr*)(_t50 + 0x14)) = 0;
					if(_a64 != 0) {
						 *_a64 = 0;
					}
					E6DB24650(_t50);
					return 0xb;
				} else {
					_t49 =  *((intOrPtr*)(__edi + 0x6c));
					_t36 = 0xfffffff1;
					if(_t49 >= 0xfffffff2) {
						_t36 = 0xfffffffe;
						if(_t49 >= 0xffffffff) {
							_t36 = 0xf;
							if(_t49 <= 0xe) {
								_t36 =  <=  ? _t49 : 2;
							}
						}
					}
					_a4 = _t36;
					 *_t60 = _t54;
					SetThreadPriority(??, ??);
					_t62 = _t60 - 8;
					 *_t62 =  *((intOrPtr*)(_t50 + 0x18));
					ResetEvent(??);
					_t63 = _t62 - 4;
					if(( *(_t50 + 0x24) & 0x00000004) != 0) {
						 *((intOrPtr*)(_t50 + 0x14)) = 0;
						 *_t63 = _t54;
						ResumeThread(??);
						_t64 = _t63 - 4;
						 *_t64 = _t54;
						CloseHandle(??);
						_t65 = _t64 - 4;
					} else {
						 *((intOrPtr*)(_t50 + 0x14)) = _t54;
						 *_t63 = _t54;
						ResumeThread(??);
						_t65 = _t63 - 4;
					}
					 *_t65 = 0;
					Sleep(??);
					return 0;
				}
			}

0x6db264c1
0x6db264c1
0x6db264c8
0x6db264d0
0x6db26374
0x6db26378
0x6db26380
0x6db26388
0x6db2638c
0x6db26394
0x6db2639b
0x6db263a1
0x6db263a9
0x6db26468
0x6db2646d
0x6db2646f
0x6db26472
0x6db26478
0x6db26478
0x6db2647b
0x6db2647e
0x6db26481
0x6db26488
0x6db2648d
0x6db26494
0x6db264a1
0x6db264a7
0x6db264a7
0x6db264af
0x6db264c0
0x6db263af
0x6db263af
0x6db263b2
0x6db263ba
0x6db26438
0x6db26440
0x6db26446
0x6db2644e
0x6db2645c
0x6db2645c
0x6db2644e
0x6db26440
0x6db263bc
0x6db263c0
0x6db263c3
0x6db263cc
0x6db263cf
0x6db263d2
0x6db263d8
0x6db263df
0x6db26410
0x6db26417
0x6db2641a
0x6db26420
0x6db26423
0x6db26426
0x6db2642c
0x6db263e1
0x6db263e1
0x6db263e4
0x6db263e7
0x6db263ed
0x6db263ed
0x6db263f0
0x6db263f7
0x6db26409
0x6db26409

APIs

Part of subcall function 6DB24AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6DB25ADA,?,?,?,?,6DB26ADD), ref: 6DB24AED

_beginthreadex.MSVCRT ref: 6DB2639B
SetThreadPriority.KERNEL32 ref: 6DB263C3
ResetEvent.KERNEL32 ref: 6DB263D2
ResumeThread.KERNEL32 ref: 6DB263E7
Sleep.KERNEL32 ref: 6DB263F7
CloseHandle.KERNEL32 ref: 6DB26472
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB26481

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Thread$CloseEventHandlePriorityResetResumeSleepValue_beginthreadexpthread_mutex_destroy
String ID:
API String ID: 2616300590-0
Opcode ID: bdfcaa91c17b2c3fce3928e3f3ba5c39b208f82b61fdd70bdf55ddf059db6d67
Instruction ID: 3f4f554949fb0e5acd83e894b0e273005bcd01a37d620d6ec8be8e72a4fb8d0c
Opcode Fuzzy Hash: bdfcaa91c17b2c3fce3928e3f3ba5c39b208f82b61fdd70bdf55ddf059db6d67
Instruction Fuzzy Hash: 88111CB64186419FC700AF39D14832EBBF0BF4A724F01461EF59A97694D7749454CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB27590 Relevance: 7.5, APIs: 5, Instructions: 32COMMON

Download Yara Rule

APIs

GetCurrentProcessId.KERNEL32 ref: 6DB275A8
OpenProcess.KERNEL32 ref: 6DB275C5
CloseHandle.KERNEL32 ref: 6DB275D5

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Process$CloseCurrentHandleOpen
String ID:
API String ID: 2750122171-0
Opcode ID: 3056a4dda66e0a7c8074f5b269c803af62502f2f09e6fb2c061df0b78edeece2
Instruction ID: e8334cadf1dd31f7bde4a60157459a393e21ccb938c9ae5694136d0337660880
Opcode Fuzzy Hash: 3056a4dda66e0a7c8074f5b269c803af62502f2f09e6fb2c061df0b78edeece2
Instruction Fuzzy Hash: BEF01272504242CFD7006FB5C6CA22A7AB0FF09345F914528D8598714DD7748045CA56

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25300 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 6DB24390: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,Error cleaning up spin_keys for thread ,6DB249A0,?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB2439E
Part of subcall function 6DB24390: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB243C8
Part of subcall function 6DB24390: pthread_mutex_init.LIBWINPTHREAD-1 ref: 6DB24408
Part of subcall function 6DB24390: calloc.MSVCRT ref: 6DB2441E

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB2532D
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB25344
fprintf.MSVCRT ref: 6DB253E8

Strings

once %p is %d, xrefs: 6DB253DD

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: callocfprintfpthread_mutex_initpthread_mutex_lockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID: once %p is %d
API String ID: 475071572-95064319
Opcode ID: cd4321819eccfb89a24ff32c0a39dd66348acf0947733e8e65b202a0749be757
Instruction ID: 7aa59d65b39688dd6dff1361c976e24f3f1365d51fa97141e08a5cd3b306bf73
Opcode Fuzzy Hash: cd4321819eccfb89a24ff32c0a39dd66348acf0947733e8e65b202a0749be757
Instruction Fuzzy Hash: D32146766083818FD700DF25E480B3EBBE4EF89314F02892DE99D97208E775D5048B56

Uniqueness

Uniqueness Score: -1.00%

Function 6DB27B40 Relevance: 6.1, APIs: 4, Instructions: 117timeCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6DB27A68), ref: 6DB27B73
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6DB27A68), ref: 6DB27C00
_errno.MSVCRT ref: 6DB27C98
_errno.MSVCRT ref: 6DB27CC2

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Time$FileSystem_errno
String ID:
API String ID: 3586254970-0
Opcode ID: 983e7f5a9c52b979f25fc23d8ccb9cb2f1f84e958bfa201d8191c513463e6765
Instruction ID: 0598b7db0be7f3f04e87cf0ebdb6f376b595b14fb01d0a4dcb0826d62d5e71da
Opcode Fuzzy Hash: 983e7f5a9c52b979f25fc23d8ccb9cb2f1f84e958bfa201d8191c513463e6765
Instruction Fuzzy Hash: DA415E726083458FC704DF79C58462ABBE5AFC8710F018A2DE99D87398DBB4D8088B42

Uniqueness

Uniqueness Score: -1.00%

Function 6DB22620 Relevance: 6.1, APIs: 4, Instructions: 91COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6DB2265E
RtlLeaveCriticalSection.NTDLL ref: 6DB22688

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: db96c418c40b9dfa3296a2e2a00068dfb1352f627e5511db8b84af278fb4f70e
Instruction ID: b378fd1a77d7c3c4831a83859906d18ae682a055b8e6e48aa118353b82ce4aaf
Opcode Fuzzy Hash: db96c418c40b9dfa3296a2e2a00068dfb1352f627e5511db8b84af278fb4f70e
Instruction Fuzzy Hash: 8C317AB36142418BDB11AF69E8C466ABBB1FF84364F148669EC188B24DE730D945CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB224E0 Relevance: 6.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6DB22516
RtlLeaveCriticalSection.NTDLL ref: 6DB22540

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: 36475f1dcb717f239cc21317c9f26895d76a9ac4e07f1e0cc7872caf62090c27
Instruction ID: 74b5340dedd4736536b7f6fa5b5e16c79b7e0132a6b74d33c515bcc49de11167
Opcode Fuzzy Hash: 36475f1dcb717f239cc21317c9f26895d76a9ac4e07f1e0cc7872caf62090c27
Instruction Fuzzy Hash: EC318AB25182418FDB14DF29E8C466A7BB1FF49318F44C669EC198B24DE331D985CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB21CA0 Relevance: 6.1, APIs: 4, Instructions: 65COMMON

Download Yara Rule

APIs

_pthread_time_in_ms_from_timespec.LIBWINPTHREAD-1 ref: 6DB21CC9
_pthread_time_in_ms.LIBWINPTHREAD-1 ref: 6DB21D21
_pthread_time_in_ms.LIBWINPTHREAD-1 ref: 6DB21D36
_pthread_rel_time_in_ms.LIBWINPTHREAD-1 ref: 6DB21D78

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: _pthread_time_in_ms$_pthread_rel_time_in_ms_pthread_time_in_ms_from_timespec
String ID:
API String ID: 3736242651-0
Opcode ID: 8492a0b9b4bd5b33c1677aa46d3c7cf8a02d1f935d7da6086077cb734987257f
Instruction ID: 2045516bf6adca1a1b90986e8382b96fb6f06968a0b31e4dd41ef64e699e9842
Opcode Fuzzy Hash: 8492a0b9b4bd5b33c1677aa46d3c7cf8a02d1f935d7da6086077cb734987257f
Instruction Fuzzy Hash: 0E214C72A183868FC714DF29D44062FFBF1BBC8794F154D2DE598A7248DB31E8498B92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23CC0 Relevance: 6.1, APIs: 4, Instructions: 59COMMON

Download Yara Rule

APIs

Part of subcall function 6DB23AC0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,6DB23C32), ref: 6DB23AD8
Part of subcall function 6DB23AC0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,6DB23C32), ref: 6DB23AEA

pthread_mutex_timedlock.LIBWINPTHREAD-1 ref: 6DB23CF4
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB23D0E

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_timedlockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 892596361-0
Opcode ID: e44487d0cc375c27c123928135f20965f4a8bacfcc33791cb8c9f78353a1a5a0
Instruction ID: d47be31505d586dee6eb7ffd259f824e468e5f603db3b60fe7ce59ae699012e9
Opcode Fuzzy Hash: e44487d0cc375c27c123928135f20965f4a8bacfcc33791cb8c9f78353a1a5a0
Instruction Fuzzy Hash: CF1191736097459BC7009F2A884063AF7E4FF813A4F05862DD95C83B08DB35E455CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24149 Relevance: 6.1, APIs: 4, Instructions: 57COMMON

Download Yara Rule

APIs

pthread_getclean.LIBWINPTHREAD-1 ref: 6DB24182
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB24192
pthread_cond_timedwait.LIBWINPTHREAD-1 ref: 6DB241C7
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB241E1

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_getclean$pthread_cond_timedwait
String ID:
API String ID: 4099121300-0
Opcode ID: b4a6dd8fb5d46bc9eccd6438265d5475802e41d17d67748213d408a5f143fd55
Instruction ID: 2b966de4c268dc1a8616f2912ba20f7609ee947c8cf00039290f75b5728f88fe
Opcode Fuzzy Hash: b4a6dd8fb5d46bc9eccd6438265d5475802e41d17d67748213d408a5f143fd55
Instruction Fuzzy Hash: 8721D3B66087418FD314DF29C48172BBBF0BF98355F01891DE49A97728C774E9498F82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB22290 Relevance: 6.1, APIs: 4, Instructions: 57COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6DB222B0
RtlLeaveCriticalSection.NTDLL ref: 6DB222CC
RtlEnterCriticalSection.NTDLL ref: 6DB22309
RtlLeaveCriticalSection.NTDLL ref: 6DB22315

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: 8f621328228dc32eb5903a6fe928f3916d6f0d6c5cfd6dbd21bb071013c2116e
Instruction ID: 1089572d9a2a4f8de3a2fd11879f6e8088d348c53bc346495cc41f41247ade27
Opcode Fuzzy Hash: 8f621328228dc32eb5903a6fe928f3916d6f0d6c5cfd6dbd21bb071013c2116e
Instruction Fuzzy Hash: EE111CB6A083108FC710EF39E98551EBBF0EF89651F42492DE98897314D231E944CB93

Uniqueness

Uniqueness Score: -1.00%

Function 6DB27A90 Relevance: 6.1, APIs: 4, Instructions: 55timeCOMMON

Download Yara Rule

APIs

FileTimeToSystemTime.KERNEL32 ref: 6DB27AED
SetSystemTime.KERNEL32 ref: 6DB27AFD
_errno.MSVCRT ref: 6DB27B18
_errno.MSVCRT ref: 6DB27B2B

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Time$System_errno$File
String ID:
API String ID: 2046127076-0
Opcode ID: e5279e8093538183db0bddd6ca11d10ea415438c01414e8d9b436be84cde035c
Instruction ID: 963b4bd82432f638e49cda1e7083fb49e2f8a5029ca8723f59c3d2b8c00e4316
Opcode Fuzzy Hash: e5279e8093538183db0bddd6ca11d10ea415438c01414e8d9b436be84cde035c
Instruction Fuzzy Hash: 2011A336A043018FC7015E6D8D8926BBBF5FB8A361F064A29E99987398E770DC048BD1

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25590 Relevance: 6.1, APIs: 4, Instructions: 53COMMON

Download Yara Rule

APIs

pthread_rwlock_wrlock.LIBWINPTHREAD-1 ref: 6DB255C7
pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB255E7
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB25630
pthread_rwlock_unlock.LIBWINPTHREAD-1 ref: 6DB2563C

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_lockpthread_mutex_unlockpthread_rwlock_unlockpthread_rwlock_wrlock
String ID:
API String ID: 1134915465-0
Opcode ID: 53b19c7966189dade7b2e20435b2f927aa0ab301ae62566f43416e89127f7836
Instruction ID: a5a5a6f3e8bb8e3a96a5d489955c284cf0fe3ccc2da5cc57784e1c5b4ba79221
Opcode Fuzzy Hash: 53b19c7966189dade7b2e20435b2f927aa0ab301ae62566f43416e89127f7836
Instruction Fuzzy Hash: 5B116A73A08282CFEB219F18D490B7B77B1FB82344F26455DC4498B21DC335D4819BAA

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23EE0 Relevance: 6.1, APIs: 4, Instructions: 53COMMON

Download Yara Rule

APIs

Part of subcall function 6DB236B0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,?,6DB23EF1), ref: 6DB236BD
Part of subcall function 6DB236B0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,?,6DB23EF1), ref: 6DB236E0

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB23F26
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB23F40

Part of subcall function 6DB23760: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,6DB23CB6), ref: 6DB23773
Part of subcall function 6DB23760: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,6DB23CB6), ref: 6DB2377D

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$pthread_mutex_lockpthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 3819599913-0
Opcode ID: 13fa31f2f513eea0270b380dad55b607ccd7b8038915c9f840e8afa32da3dd88
Instruction ID: 46767b327e4f910d594512b69b8da811612329d83f4fff4c522b9c97144d1779
Opcode Fuzzy Hash: 13fa31f2f513eea0270b380dad55b607ccd7b8038915c9f840e8afa32da3dd88
Instruction Fuzzy Hash: 49016172B18B428B93119F3A98C053BB7F5FFC4658B15892CD9989770CEB31E4468BC1

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25260 Relevance: 6.1, APIs: 4, Instructions: 53COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 6DB2527B
GetProcessAffinityMask.KERNEL32 ref: 6DB25290
GetCurrentProcess.KERNEL32 ref: 6DB252CC
SetProcessAffinityMask.KERNEL32 ref: 6DB252D5

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Process$AffinityCurrentMask
String ID:
API String ID: 1231390398-0
Opcode ID: e52bc65e795e6a9cf38251f42f611c47095622a483737f928a29b04aaed0df4b
Instruction ID: 151d8d17556835dcc8ec54073a3ac33be1fd81c3bb2aeefa27400dc951791897
Opcode Fuzzy Hash: e52bc65e795e6a9cf38251f42f611c47095622a483737f928a29b04aaed0df4b
Instruction Fuzzy Hash: 660180B39083164BC7009EB9D88527EBBF4FB85741F42893DE98993249E631D449C7D5

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23D80 Relevance: 6.1, APIs: 4, Instructions: 52COMMON

Download Yara Rule

APIs

Part of subcall function 6DB23AC0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,6DB23C32), ref: 6DB23AD8
Part of subcall function 6DB23AC0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,6DB23C32), ref: 6DB23AEA

pthread_mutex_trylock.LIBWINPTHREAD-1 ref: 6DB23DA8
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB23DC2

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_trylockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 1963305777-0
Opcode ID: 523a5165b2678da65e33ed7d756a0a0460756e3676b8b0c042c90712437476c3
Instruction ID: d0707bb5147b6e243fc41b278437e3dda380d51fd88a48e9edc45cacbf7df8ca
Opcode Fuzzy Hash: 523a5165b2678da65e33ed7d756a0a0460756e3676b8b0c042c90712437476c3
Instruction Fuzzy Hash: 6F01DB336087418BC311AF3B988053FB7E4EF40264B05893DC55C83708D735D406CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23C20 Relevance: 6.1, APIs: 4, Instructions: 52COMMON

Download Yara Rule

APIs

Part of subcall function 6DB23AC0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,6DB23C32), ref: 6DB23AD8
Part of subcall function 6DB23AC0: pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,6DB23C32), ref: 6DB23AEA

pthread_mutex_lock.LIBWINPTHREAD-1 ref: 6DB23C48
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB23C62

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_lockpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 967236581-0
Opcode ID: c2488e48a17e686004593d091d2cc69e7754790361af549fae8c4315625c74d7
Instruction ID: 83b9d42868d5b45e4d5ebcfbcd47c9b7737a9490ed6338d958b66b1325e64bc0
Opcode Fuzzy Hash: c2488e48a17e686004593d091d2cc69e7754790361af549fae8c4315625c74d7
Instruction Fuzzy Hash: 900192736087858BC711AF7A988053FB7E4EF84268F05893DD59C87708EB35E4468BA2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24E9B Relevance: 6.0, APIs: 4, Instructions: 48COMMON

Download Yara Rule

APIs

TlsSetValue.KERNEL32 ref: 6DB24E2F
CloseHandle.KERNEL32 ref: 6DB24EB1
CloseHandle.KERNEL32 ref: 6DB24EF3
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB24F06
CloseHandle.KERNEL32 ref: 6DB24F1F
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB24F35

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CloseHandle$pthread_mutex_destroy$Value
String ID:
API String ID: 2720804228-0
Opcode ID: 585a2f1dae83b1858e102566fe17a038e6ed501038bf651c78f725bb381039a4
Instruction ID: ad3f4d4a7b33083f634984b4c919a9e7df6eec8caef956f2312fb79aa657e59b
Opcode Fuzzy Hash: 585a2f1dae83b1858e102566fe17a038e6ed501038bf651c78f725bb381039a4
Instruction Fuzzy Hash: 26115AB26043418BEB01AF28D6C473A7BB0EB59304F024468DD599B64DDB74D855CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB279E0 Relevance: 6.0, APIs: 4, Instructions: 46COMMON

Download Yara Rule

APIs

clock_gettime.LIBWINPTHREAD-1 ref: 6DB27A08

Part of subcall function 6DB277B0: QueryPerformanceFrequency.KERNEL32 ref: 6DB277E6
Part of subcall function 6DB277B0: QueryPerformanceCounter.KERNEL32 ref: 6DB277FE

nanosleep.LIBWINPTHREAD-1 ref: 6DB27A2F
nanosleep.LIBWINPTHREAD-1 ref: 6DB27A63
_errno.MSVCRT ref: 6DB27A6E

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: PerformanceQuerynanosleep$CounterFrequency_errnoclock_gettime
String ID:
API String ID: 78328299-0
Opcode ID: 45edc42297f89a7c79cb310cf4517e614e1a646091d631a961196b4f9bf8eeb4
Instruction ID: 127b917194abe77f8495e6bffa345eb485232cdc57473909be9ccf27d50440e5
Opcode Fuzzy Hash: 45edc42297f89a7c79cb310cf4517e614e1a646091d631a961196b4f9bf8eeb4
Instruction Fuzzy Hash: 721112B690D3418FC750DF29D98452BBBE0FF89360F11A91EF89987318E370D9848B82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB26F71 Relevance: 6.0, APIs: 4, Instructions: 46COMMON

Download Yara Rule

APIs

pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26F88
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26F98

Part of subcall function 6DB21FA0: pthread_getevent.LIBWINPTHREAD-1 ref: 6DB21FBA
Part of subcall function 6DB21FA0: ResetEvent.KERNEL32 ref: 6DB22010
Part of subcall function 6DB21FA0: pthread_testcancel.LIBWINPTHREAD-1 ref: 6DB22024

pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26FCE
_errno.MSVCRT ref: 6DB27001

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_getclean$EventReset_errnopthread_geteventpthread_testcancel
String ID:
API String ID: 2513142241-0
Opcode ID: cf7b89746e99f21c34cfaa6332bf503f8e0b4ffe4d363d871b0762766c020515
Instruction ID: af68efe037b5a13f851077c61ff885d839d304d86ae14cc9af283cbaa2ae69d0
Opcode Fuzzy Hash: cf7b89746e99f21c34cfaa6332bf503f8e0b4ffe4d363d871b0762766c020515
Instruction Fuzzy Hash: DE111CB69093409FD7009F28C58432EF7E4EF89754F414A5DF8A897364D774D8008B82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB248D0 Relevance: 6.0, APIs: 4, Instructions: 44COMMON

Download Yara Rule

APIs

pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24B15,?,?,?,?,?,?,?,?,?,?,?), ref: 6DB248DC
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB2491C
calloc.MSVCRT ref: 6DB24947

Part of subcall function 6DB244E0: malloc.MSVCRT ref: 6DB24515

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: callocmallocpthread_mutex_lockpthread_mutex_unlock
String ID:
API String ID: 3464030426-0
Opcode ID: f8d0a89dfe41042f65bbcc76904c649a8487795ebf188115db166bee58b37ab5
Instruction ID: 8025d2baff6fd1147ea8263fca731566262f1ab45d7192b089f8c53c12e75846
Opcode Fuzzy Hash: f8d0a89dfe41042f65bbcc76904c649a8487795ebf188115db166bee58b37ab5
Instruction Fuzzy Hash: FE011E736183828EEB119F69958037B7AA4AB1B758F42003CCA9C9B64DDB74C505CBA3

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23FF6 Relevance: 6.0, APIs: 4, Instructions: 43COMMON

Download Yara Rule

APIs

pthread_getclean.LIBWINPTHREAD-1 ref: 6DB24014
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB24024
pthread_cond_wait.LIBWINPTHREAD-1 ref: 6DB24052

Part of subcall function 6DB22760: RtlEnterCriticalSection.NTDLL ref: 6DB2279B
Part of subcall function 6DB22760: RtlLeaveCriticalSection.NTDLL ref: 6DB227AB
Part of subcall function 6DB22760: pthread_getclean.LIBWINPTHREAD-1 ref: 6DB227D8
Part of subcall function 6DB22760: pthread_getclean.LIBWINPTHREAD-1 ref: 6DB227E8
Part of subcall function 6DB22760: pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB227FF
Part of subcall function 6DB22760: pthread_getclean.LIBWINPTHREAD-1 ref: 6DB2280C

pthread_getclean.LIBWINPTHREAD-1 ref: 6DB2405F

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_getclean$CriticalSection$EnterLeavepthread_cond_waitpthread_mutex_unlock
String ID:
API String ID: 2872453927-0
Opcode ID: 950b015c70b12d5cfba990cec5d1a4b5dc7edf9c34d2c28516d3c6853a9a7f10
Instruction ID: 0ce597918950930fc53c0cff633b2f3d84d8e6bb48dbd54d89c29e191af937ff
Opcode Fuzzy Hash: 950b015c70b12d5cfba990cec5d1a4b5dc7edf9c34d2c28516d3c6853a9a7f10
Instruction Fuzzy Hash: D011F7B69083418FC704DF25C04066AB7E4BF88319F01495EE99DA7328D778DA45CF92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB26E43 Relevance: 6.0, APIs: 4, Instructions: 42COMMON

Download Yara Rule

APIs

pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26E58
pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26E68

Part of subcall function 6DB21FA0: pthread_getevent.LIBWINPTHREAD-1 ref: 6DB21FBA
Part of subcall function 6DB21FA0: ResetEvent.KERNEL32 ref: 6DB22010
Part of subcall function 6DB21FA0: pthread_testcancel.LIBWINPTHREAD-1 ref: 6DB22024

pthread_getclean.LIBWINPTHREAD-1 ref: 6DB26E94
_errno.MSVCRT ref: 6DB26EC7

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_getclean$EventReset_errnopthread_geteventpthread_testcancel
String ID:
API String ID: 2513142241-0
Opcode ID: 84656e93728e32af182f98a1d9d692b86b36f91896ec929328f94b74523e5789
Instruction ID: bdcd4bce3505c2cd0485bff3008ddb04119b4a6a347e30cf069770892cf9d6be
Opcode Fuzzy Hash: 84656e93728e32af182f98a1d9d692b86b36f91896ec929328f94b74523e5789
Instruction Fuzzy Hash: 09110C765097418FD300EF28D54423EBBE0EF89768F414A5DE8E8AB268C774D9458F93

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25D7C Relevance: 6.0, APIs: 4, Instructions: 40COMMON

Download Yara Rule

APIs

SetEvent.KERNEL32 ref: 6DB25D9F
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB25DCB
_pthread_invoke_cancel.LIBWINPTHREAD-1 ref: 6DB25DD0
pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB25DDB

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$Event_pthread_invoke_cancel
String ID:
API String ID: 3393619686-0
Opcode ID: f65254ab2fd28f7ad45e7f71f311aceae42dfc712c6df6dd91f901af7570ace5
Instruction ID: 2bcd8487864625fb429bb07c3ca4cdf9bf2c4071d56ebf6e20d56d6410ffaa0d
Opcode Fuzzy Hash: f65254ab2fd28f7ad45e7f71f311aceae42dfc712c6df6dd91f901af7570ace5
Instruction Fuzzy Hash: BC01DFB35186C04BCB018F3988852B97BF0EF463A8B26475CCCAD9B28EC324E4058748

Uniqueness

Uniqueness Score: -1.00%

Function 6DB28410 Relevance: 6.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL ref: 6DB2841E
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,6DB285DB,?,?,?,?,?,6DB27F28), ref: 6DB28445
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,6DB285DB,?,?,?,?,?,6DB27F28), ref: 6DB2844C
RtlLeaveCriticalSection.NTDLL ref: 6DB2846C

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: a20c2411df26e179eb1774abc0e1e12ba3713317f52847cb1c96bbb0bfc89dac
Instruction ID: 7f3a3c1e710f6a06d568bd1e03124e57d3e72ec1e0ac11a07f26d25ad1e4dd37
Opcode Fuzzy Hash: a20c2411df26e179eb1774abc0e1e12ba3713317f52847cb1c96bbb0bfc89dac
Instruction Fuzzy Hash: 2EF081B75006518FCB00BF69C589A3A7BB4EB4AA50B020568DD994720DD730E6058BA3

Uniqueness

Uniqueness Score: -1.00%

Function 6DB26431 Relevance: 6.0, APIs: 4, Instructions: 35threadsleepCOMMON

Download Yara Rule

APIs

SetThreadPriority.KERNEL32 ref: 6DB263C3
ResetEvent.KERNEL32 ref: 6DB263D2
ResumeThread.KERNEL32 ref: 6DB263E7
Sleep.KERNEL32 ref: 6DB263F7

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: Thread$EventPriorityResetResumeSleep
String ID:
API String ID: 3424743960-0
Opcode ID: 303c2f99d60f30c6cceaadbcb4e66790ee487a5dd03a42566f35763d551ea550
Instruction ID: a44950b9c6da77dfa3adb344ae024dff6720b3eb51f124185123a2462d1a82a6
Opcode Fuzzy Hash: 303c2f99d60f30c6cceaadbcb4e66790ee487a5dd03a42566f35763d551ea550
Instruction Fuzzy Hash: 48F08CB35045408BDB106F7C964933DBAB0FF0A711F01062DF9AA83688D7349594CBC2

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25660 Relevance: 6.0, APIs: 4, Instructions: 34COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6DB25669

Part of subcall function 6DB24AD0: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6DB25ADA,?,?,?,?,6DB26ADD), ref: 6DB24AED

pthread_spin_lock.LIBWINPTHREAD-1 ref: 6DB2567E
pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB256A2
SetLastError.KERNEL32 ref: 6DB256AA

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ErrorLast$Valuepthread_spin_lockpthread_spin_unlock
String ID:
API String ID: 3182649391-0
Opcode ID: 0e46b5152f46415596a11db48c2e4500599cc0fbcf33d259ad6f3f8af8c3944d
Instruction ID: 277e430fc6c6733aae1ff7f69ce0eeb1d92751e4ff0edbe2dd4f62ac736bf3f7
Opcode Fuzzy Hash: 0e46b5152f46415596a11db48c2e4500599cc0fbcf33d259ad6f3f8af8c3944d
Instruction Fuzzy Hash: D5F090765082848FC741BF29D484A6E7BF5FF89210F470468FD4A8B34AD7309950CB92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB25A70 Relevance: 6.0, APIs: 4, Instructions: 32synchronizationCOMMON

Download Yara Rule

APIs

__pth_gpointer_locked.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,?,?,?,6DB25B55,?,?,?,?), ref: 6DB25A77

Part of subcall function 6DB24C20: pthread_mutex_lock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C36
Part of subcall function 6DB24C20: pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,00000000,?,6DB24C6F,?,?,?,?,?,?,00000000,?,?,?,6DB258D2), ref: 6DB24C4B

WaitForSingleObject.KERNEL32 ref: 6DB25AAE
pthread_mutex_unlock.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,?,?,?,?,?,6DB25B55), ref: 6DB25AC1
_pthread_invoke_cancel.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,?,?,?,?,?,6DB25B55), ref: 6DB25AC6

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_unlock$ObjectSingleWait__pth_gpointer_locked_pthread_invoke_cancelpthread_mutex_lock
String ID:
API String ID: 4257296073-0
Opcode ID: c0bcfd196e5e7ac3f3ad29b6b16d12ac615e78a4b9a2a45e64ce4fcdfd5bf54c
Instruction ID: 21db674b205a560039cf83a532221eff63a78ec2cef97071050c17b9710ebc7a
Opcode Fuzzy Hash: c0bcfd196e5e7ac3f3ad29b6b16d12ac615e78a4b9a2a45e64ce4fcdfd5bf54c
Instruction Fuzzy Hash: F4F03AB29083964BDB00AF3989C67397BF4EB06304F46495DD98A9B28EE730D4458655

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23A60 Relevance: 6.0, APIs: 4, Instructions: 24COMMON

Download Yara Rule

APIs

pthread_spin_lock.LIBWINPTHREAD-1(?,?,?,?,?,6DB23B15,?,?,?,?,6DB23C32), ref: 6DB23A6D
pthread_rwlock_init.LIBWINPTHREAD-1 ref: 6DB23A82

Part of subcall function 6DB23920: calloc.MSVCRT ref: 6DB23948
Part of subcall function 6DB23920: pthread_mutex_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6DB23A87), ref: 6DB23980
Part of subcall function 6DB23920: pthread_mutex_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6DB23A87), ref: 6DB23997
Part of subcall function 6DB23920: pthread_cond_init.LIBWINPTHREAD-1(?,?,?,?,?,?,?,?,00000000,?,6DB23A87), ref: 6DB239AE

pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB23A90
pthread_spin_unlock.LIBWINPTHREAD-1(?,?,?,?,?,6DB23B15,?,?,?,?,6DB23C32), ref: 6DB23AAC

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: pthread_mutex_initpthread_spin_unlock$callocpthread_cond_initpthread_rwlock_initpthread_spin_lock
String ID:
API String ID: 611557388-0
Opcode ID: c91e1ecb996d13806066fcde570824d4735014da6c0a5458c344e1247125d8ba
Instruction ID: 403f8bdf7f92201f819c2807679f02cd566c5e7235611aaca3bc645d53391254
Opcode Fuzzy Hash: c91e1ecb996d13806066fcde570824d4735014da6c0a5458c344e1247125d8ba
Instruction Fuzzy Hash: 4CE012B360D244C7C7007FB8688653DB6A0BB5A218F81057CD28C67749D33105545B53

Uniqueness

Uniqueness Score: -1.00%

Function 6DB23BD7 Relevance: 6.0, APIs: 4, Instructions: 21COMMON

Download Yara Rule

APIs

pthread_cond_destroy.LIBWINPTHREAD-1 ref: 6DB23BE6
pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB23BF1

Part of subcall function 6DB23470: CloseHandle.KERNEL32(?,?,?,74E06490,6DB26D24,?,?,?,?,?,?,?,?,6DB2160A), ref: 6DB2348D
Part of subcall function 6DB23470: ??3@YAXPAX@Z.MSVCRT ref: 6DB23499

pthread_mutex_destroy.LIBWINPTHREAD-1 ref: 6DB23BFC
??3@YAXPAX@Z.MSVCRT ref: 6DB23C0E

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: ??3@pthread_mutex_destroy$CloseHandlepthread_cond_destroy
String ID:
API String ID: 3524040118-0
Opcode ID: 9516e276ec13ede196739bde5570f6dc5ce011ae301a9d6e2ab23e8445cd2457
Instruction ID: 22923401f27dfb98ddf7bdf955be43779cf1575f1663ea0ddd4daed7f74dc982
Opcode Fuzzy Hash: 9516e276ec13ede196739bde5570f6dc5ce011ae301a9d6e2ab23e8445cd2457
Instruction Fuzzy Hash: 1CE0E5B691CB808FDB20AF64E4845A9F7E4BF04318F020D2E99D997314E334E589CB52

Uniqueness

Uniqueness Score: -1.00%

Function 6DB28190 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 173COMMON

Download Yara Rule

Strings

Unknown pseudo relocation bit size %d., xrefs: 6DB28294
Unknown pseudo relocation protocol version %d., xrefs: 6DB283F6

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.
API String ID: 0-395989641
Opcode ID: a3df9f79074355361c19c2ac65a02c057be0a60a8cc0c5ae9973adf39288cdee
Instruction ID: 96b219951bc982fbd05524c564d38a3949f9bb4b4cefb4faadc21704ec08a478
Opcode Fuzzy Hash: a3df9f79074355361c19c2ac65a02c057be0a60a8cc0c5ae9973adf39288cdee
Instruction Fuzzy Hash: E351A27B9142958BDB01CF68C880EBEB7B2FF89344F128519D91DAB30DD730E9158B92

Uniqueness

Uniqueness Score: -1.00%

Function 6DB238B6 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 23threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6DB238C5
printf.MSVCRT ref: 6DB23906

Strings

RWL%p %d V=%0X B=%d r=%ld w=%ld L=%p %s, xrefs: 6DB238FF

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CurrentThreadprintf
String ID: RWL%p %d V=%0X B=%d r=%ld w=%ld L=%p %s
API String ID: 2356641437-4072378567
Opcode ID: b5b9f400b27964481030d81b922dfdb60f6e015dbb8f660b7d13a0d870b2ef45
Instruction ID: b584e7cd646a2ce1cc8f820c2ab37aea6d981b5524365f0fe8d562aa4a81bbd8
Opcode Fuzzy Hash: b5b9f400b27964481030d81b922dfdb60f6e015dbb8f660b7d13a0d870b2ef45
Instruction Fuzzy Hash: 8EF0AAB69083118FDB00CF18D05435AFBE0BF89714F01885EE998A7364C771A9098F82

Uniqueness

Uniqueness Score: -1.00%

Function 6DB253C1 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 22COMMON

Download Yara Rule

APIs

pthread_mutex_unlock.LIBWINPTHREAD-1 ref: 6DB25344

Part of subcall function 6DB247E0: pthread_spin_lock.LIBWINPTHREAD-1(?,?,00000000,00000004,6DB249D9,?,Error cleaning up spin_keys for thread ,?,6DB24AE5), ref: 6DB247EE
Part of subcall function 6DB247E0: pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB2482E

fprintf.MSVCRT ref: 6DB253E8

Strings

once %p is %d, xrefs: 6DB253DD

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: fprintfpthread_mutex_unlockpthread_spin_lockpthread_spin_unlock
String ID: once %p is %d
API String ID: 52179501-95064319
Opcode ID: 7979fc2632b71b667aeb9519c8a3c800f4db52b7081a7b4316c50ec5bc577201
Instruction ID: 0600d41c99a780abdbee8ddfa645b6cfc0b849a3065a8b7b832c055c02fd2fab
Opcode Fuzzy Hash: 7979fc2632b71b667aeb9519c8a3c800f4db52b7081a7b4316c50ec5bc577201
Instruction Fuzzy Hash: E0E01AB7A087A08BC7016F65958437DFBE0FF84714F02881EDADDA3208D73991418B46

Uniqueness

Uniqueness Score: -1.00%

Function 6DB24866 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15COMMON

Download Yara Rule

APIs

pthread_spin_unlock.LIBWINPTHREAD-1 ref: 6DB2482E
fprintf.MSVCRT ref: 6DB2488C

Strings

%p not found?!?!, xrefs: 6DB24881

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: fprintfpthread_spin_unlock
String ID: %p not found?!?!
API String ID: 1334223825-11085004
Opcode ID: c8a9fa80751798a030114fd382a16797b85c75f8378490c1047b6d3b4fbaf9d8
Instruction ID: ff92753a26da3216810df84381870e22d0dcfd908b5d8adec1ff2e95d77077b2
Opcode Fuzzy Hash: c8a9fa80751798a030114fd382a16797b85c75f8378490c1047b6d3b4fbaf9d8
Instruction Fuzzy Hash: ADE0ECB34087958BCB00AF64E4453AEBBF0FB54304F06881DD6DD17208C73565818F53

Uniqueness

Uniqueness Score: -1.00%

Function 6DB251A7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 14threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6DB251B0
printf.MSVCRT ref: 6DB251D1

Strings

T%p %d %s, xrefs: 6DB251CA

Memory Dump Source

Source File: 0000000D.00000002.542492633.000000006DB21000.00000040.00000001.01000000.0000000A.sdmp, Offset: 6DB20000, based on PE: true

Associated: 0000000D.00000002.542484329.000000006DB20000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542504073.000000006DB2B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542511060.000000006DB2F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542518888.000000006DB34000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542570385.000000006DB96000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000002.542587697.000000006DBA6000.00000004.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_6db20000_dllhost.jbxd

Similarity

API ID: CurrentThreadprintf
String ID: T%p %d %s
API String ID: 2356641437-3109981362
Opcode ID: 3a8824ef85e9e8a7a099e4b333d6e861a0ba21ad7a9432c4c02e19de48eae6bc
Instruction ID: 468665d0560f364a55a9f17cf25c10eff46a9585abe6c75d3482ba7c10c2a2c4
Opcode Fuzzy Hash: 3a8824ef85e9e8a7a099e4b333d6e861a0ba21ad7a9432c4c02e19de48eae6bc
Instruction Fuzzy Hash: 69D017B28093009FE7009F15E0443AEFBF0EF8A711F11C81EE49C83208D330A4418B43

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	To disguise the source of malicious traffic, adversaries may chain together multiple proxies. Typically, a defender will be able to identify the last proxy traffic traversed before it enters their network; the defender may or may not be able to identify any previous proxies before the last-hop proxy. This technique makes identifying the original source of the malicious traffic even more difficult by requiring the defender to trace malicious traffic through several proxies to identify its source.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Network protocol analysis
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report y8uLBHoe4J.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: BitRat

Yara Overview

Initial Sample

Memory Dumps

Unpacked PEs

Sigma Overview

System Summary

Jbx Signature Overview

AV Detection

Cryptography

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-certs (copy)

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-certs.tmp

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdesc-consensus (copy)

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdesc-consensus.tmp

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdescs (copy)

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdescs.new

C:\Users\user\AppData\Local\a31a93ae\tor\data\cached-microdescs.tmp

C:\Users\user\AppData\Local\a31a93ae\tor\data\state (copy)

C:\Users\user\AppData\Local\a31a93ae\tor\data\state.tmp

C:\Users\user\AppData\Local\a31a93ae\tor\data\unverified-microdesc-consensus (copy)

C:\Users\user\AppData\Local\a31a93ae\tor\data\unverified-microdesc-consensus.tmp

C:\Users\user\AppData\Local\a31a93ae\tor\dllhost.exe

C:\Users\user\AppData\Local\a31a93ae\tor\libcrypto-1_1.dll

C:\Users\user\AppData\Local\a31a93ae\tor\libevent-2-1-6.dll

Windows Analysis Report
y8uLBHoe4J.exe

Function 006940A8 Relevance: 7.6, APIs: 5, Instructions: 62
threadCOMMON

Function 006A7EF2 Relevance: 4.7, APIs: 3, Instructions: 186
COMMONLIBRARYCODE

Function 00693FF4 Relevance: 3.0, APIs: 2, Instructions: 38
threadCOMMON

Function 0069FA12 Relevance: 1.5, APIs: 1, Instructions: 39
memoryCOMMONLIBRARYCODE

Function 006A03DE Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMONLIBRARYCODE